Cyber Talk: Frauds galore in the name of Income Tax
Beware, scamsters can pose as IT officers and target gullible people
Hyderabad: Digital technology, which has advanced by leaps and bounds in the last few years, has now become a tool for unscrupulous elements to exploit and target the gullible tax payers. Fraudsters are using social engineering tactics, a practice of convincing people to share their personal information. Posing as Income Tax officers, fraudsters target people with a PAN card and con them into sharing personal information.
They usually claim either (a) Victim hasn’t paid enough taxes as per his earnings (b) There is a tax refund because he excessively paid taxes. (c) Hasn’t paid taxes on time.
Income tax frauds are usually common in the USA but not in India. In the last couple of years, however, we have seen an unfortunate surge in India, with scammers exploiting the fear of taxpayers about filing returns, claiming refunds, and paying fines for paying less taxes. These scammers impersonate official IT officers and use common social engineering tactics to create a sense of urgency and fear among their victims.
Common techniques used by scammers:
The modus operandi of fake income tax officers calling and trapping innocent victims is a well-orchestrated series of steps designed to deceive and manipulate individuals.
* Scammers use various techniques to appear legitimate and send spoof emails with fake official letterheads, logos, and email addresses that closely resemble the real Income Tax department. Victims mostly agree to scammers claims that failure to comply will result in legal actions, arrest, or tax raids.
* Spoofed IT websites will trick users into entering their personal information and making payments for getting tax refunds or paying taxes.
* Scammers make calls from spoofed income tax office phone numbers pretending to be tax officers and intimidate taxpayers by threatening legal action/fines/arrests if they fail to comply.
* Scammers may demand immediate payments for “processing fees”, “tax liabilities”, or “penalties” to facilitate high returns.
Protecting yourself from income tax fraud:
* Never download any applications from websites (i.e., APK and DMZ files). Download application from either Play Store or App Store.
* Be cautious of unsolicited emails and messages. All official communication from the tax authorities is typically sent through traditional post mail or from an official email and not from Gmail, etc
* Ensure you see the complete email header before opening any link attached to the email. (a) https://mxtoolbox.com/EmailHeaders.aspx (b) https://dnschecker.org/email-header-analyzer.php
* Check the validity of SMS by logging in and checking the SMS headers at https://smsheader.trai.gov.in/.
* Never click on short links received via SMS or WhatsApp. First un-shorten them (https://www.unshorten.it or https://www.checkshorturl.com and confirm they are not phishing links before you open them. https://isitphishing.org/ or https://www.urlvoid.com/
* The Income Tax Department will never ask for sensitive information, such as your PAN number, bank details, or OTP, through email or phone. Never share such information with anyone who contacts you unexpectedly.
* Always verify the website URL before providing any personal information. The official website of the Income Tax Department in India is https://www.incometaxindia.gov.in
* Pay fees, penalties or claim refunds only through official website. https://www.incometax.gov.in
* Keep yourself updated on the latest scams and fraud tactics by regularly checking official government websites and news sources
Reporting an income tax fraud:
* If you receive a suspicious message/email/phone call, report it to the IT department or law enforcement authorities. Forward the e-mail or website URL to webmanager@incometax.gov.in and ensure a copy may also be forwarded to incident@cert-in.org.in
* If the money is lost when paying via any UPI payment, call the toll-free number 14448 or report it at https://cms.rbi.org.in, or alternatively, email your complaint to CRPC@rbi.org.in
* If you are a victim of cybercrime (lost money via bank, card, or UPI), call the toll-free number 1930, Citizen Financial Fraud Management Systems, or register a complaint at https://www.cybercrime.gov.in
