Anand Kumar/AI-Generated Image
Summary: If you've recently filed your income tax return and are expecting a refund, you're not alone — but neither are the scammers. Cybercriminals are cashing in on refund season by posing as Income Tax Department officials, tricking taxpayers into giving away sensitive details. In this guide, we help you recognise the red flags and keep your refund — and your money — safe.
Imagine this: you file your Income Tax Return (ITR), everything seems in order, and a few days later you get an SMS or email that says, “Your income tax refund has been approved. Please click this link to verify your bank details.”
The message even includes your PAN or part of your Aadhaar number. Looks legit, right?
Wrong. It's a classic scam. And it's becoming increasingly sophisticated.
The Income Tax Department recently issued an official alert cautioning taxpayers about these fraudulent messages, which impersonate the department’s branding and tone.
What the scam looks like
- Manual verification: You may receive a mail asking you to manually fill up your personal and financial information by clicking a link. The IT department has clarified this is a scam. So, if you receive such mail, do not even bother to reply. Please note: the IT department will never send any emails, messages or call you for your PIN, OTP, passwords or any other details that can access your investment portals, bank accounts and other financial accounts.
- Fake websites: Fraudsters create fake websites that mimic the official income tax e-filing portal (like incometaxindia.gov.in) but with slight changes, such as incometaxrefund-gov.in.
- Phishing links: You’re asked to "verify" your refund by clicking a link that leads to a fake portal where you're asked to enter your PAN, Aadhaar, bank account, OTPs or even UPI details.
- Scam calls and WhatsApp messages: Some scammers pose as IT officers over phone calls or send WhatsApp messages, promising faster refunds in exchange for a small “processing fee”.
- Social engineering: They create urgency, saying your refund will expire or be blocked if you don’t act immediately.
Why it works
- Many taxpayers aren’t aware of how the actual refund process works.
- The refund season creates a sense of expectation, so confirmation messages don’t seem suspicious.
- The fake messages often use real income tax language, branding or logos, making them hard to spot.
Here’s what the Income Tax Department will never do
- Ask for your bank PINs, OTPs or UPI passwords
- Send links asking you to verify your account
- Contact you via personal WhatsApp messages
- Threaten to cancel your refund
Your official tax refund status can only be checked on the official e-filing portal or via authorised bank accounts. The communication will always come from addresses ending in @incometax.gov.in.
How to protect yourself
- Never click on unsolicited links. Always type the official IT portal link yourself. It is incometax.gov.in.
- Do not share OTPs or bank login credentials, even if someone claims to be from a government agency.
- Report phishing attempts: Forward fake messages to [email protected] or report them via the National Cybercrime Portal.
- Use two-factor authentication on your financial accounts.
- Don’t open any attachments, as it may infect your computer.
- It’s always best to install and regularly update your antivirus software.
A simple principle to follow
If it’s too urgent, it’s probably a scam. No government agency will ever rush you over a text message.
How to report a scam
If you get a fraudulent email, you may report it to [email protected].
In case you receive a call, you can contact the IT department at 1800 103 0025 or 1800 419 0025.
Final word
A tax refund can feel like a small windfall — don’t let it turn into a loss. Stay vigilant, stay informed, and always double-check any communication you receive.
Also read: How to prepare to file your income tax return
This article was originally published on July 24, 2025.
Ask Value Research 
New episodes every Friday 
New Process Alert 
Seems like you've uploaded a wrong QR code. Please upload the QR code downloaded from MF Central platform.
