Think before you click: IT department flags danger to phishing scams—Here’s how to identify fake emails

The Income Tax Department has issued a strong advisory to the public, warning about a surge in phishing emails, fraudulent refund scams, and fake websites impersonating official tax authorities. These scams are designed to steal sensitive financial information and can result in substantial financial losses.

What is phishing?

Phishing is a cybercrime where fraudsters send emails or create websites that appear to be from legitimate organizations—like the Income Tax Department—to trick people into sharing personal or financial details such as bank account numbers, credit card information, or passwords.

Official disclaimer

• The Income Tax Department never requests detailed personal information through email.
• It does NOT ask for PINs, passwords, or similar access information for credit cards, banks, or other financial accounts via email.

How to identify phishing or fraudulent emails

• Check the sender: Fraudulent emails may use addresses that look similar to official ones but have subtle differences.
• Beware of urgent requests: Scammers often claim your refund is pending or your account will be locked unless you act immediately.
• Look for suspicious links or attachments: These may contain malicious software or direct you to fake websites.
• Grammar and spelling errors: Official communications are usually professionally written; errors can be a red flag.

What should you do if you receive a suspicious email?

• Do not reply to the email.
• Do not open any attachments. They may contain viruses or malware.
• Do not click on any links. If you have already clicked, do not enter any confidential information.
• Do not cut and paste links from suspicious emails into your browser, as they may redirect you to fraudulent sites.
• Keep your computer protected with up-to-date antivirus, antispyware, and firewall software.

How to report phishing and fake websites

If you receive an email or find a website pretending to be from the Income Tax Department:

1. Forward the email or website URL to

•     webmanager@incometax.gov.in
• (You may also send a copy to incident@cert-in.org.in)

2. Include the Internet header of the email if possible, as it helps authorities trace the sender.

3. Delete the suspicious message after reporting.

If the phishing attempt is unrelated to the Income Tax Department, forward it to incident@cert-in.org.in.

Stay vigilant

The Income Tax Department urges everyone to remain alert and cautious. Never share your personal or financial information in response to unsolicited emails or on unfamiliar websites. For more information and official updates, visit the Income Tax Department’s official website.

Protect yourself and your finances—when in doubt, report and delete suspicious emails immediately.

https://incometaxindia.gov.in/pages/report-phishing.aspx