Phishing cases have increased in recent months, with impersonations of numerous private companies such as telephone companies but also public entities. Among these stands out the Tax Agency to which have been spoofed numerous times with bogus tax refunds or notification notices which are completely fraudulent.
And it is that when an email from the Tax Agency arrives, the whole world is made to tremble and worries. The truth is that although it may be easy to detect these phishing scams, lately we have seen how they have improved substantially when offering email addresses with domains that pass for authentic, but in the end the address to which it redirects leaves no room for doubt.
The Tax Agency gives examples of fraudulent messages
Given the increase in these cases of phishing, the Tax Agency itself has reported on its website two examples of false email. In this way it is about citizens are prepared in the event that we receive this type of communication to know that they are completely false.
The first example lies in the notification notice from the Tax Agency. In the body of the message, it informs that it corresponds to a notice of postal notification with the issuance holder, the organization, an identification code (2299031217395), a concept and the link. In addition, it is also specified that it can be accessed through the Unique Enabled Electronic Address (DEHÚ) with direct access to the notification.
Precisely in this link is the fraud, since it will request different personal data in the web that opens to access this supposed notification. For give it greater credibilityalso specifies the legislation that this notification is covered by.
As a second example they specify sending an SMS that impersonates the AEAT in which a tax return is promised (especially as a result of the Income campaigns). This SMS specifies the following: “Tax Agency: You have qualified for a tax refund of (€152). Find more information on the website: (link)”.
The link that accompanies the SMS leads to a web page that impersonates the page of the Tax Agency with a box leading to an electronic reimbursement form. This form asks for the details of the bank card, such as the number, the expiration date and also the security code. In many cases it is possible that a notification will even arrive through the bank to validate this charge.
Definitelyin no case will they have to pay attention to this type of electronic notifications that arrive in an SMS or by email. In the event that you receive a notification from the Treasury, it is important that you know that they will not leave you any link to enter, but rather they will ask you to access through official channels.