Beware of phishing emails from fake I-T dept ids
Amarpal S Chadha, Tax Partner & India Mobility Leader, EY India
Akshay got an e-mail yesterday to complete his return of Income by authenticating his bank account details so that a refund of Rs 19,870 could be credited to him in a week’s time. He happily proceeded to the link and provided details of his bank account to process the refund. Within minutes, he got a confirmation message that the refund due to him would be processed within 7 days.
Next day, he discussed the e-mail and shared his happiness with his tax consultant. The tax consultant asked him, “Did the notice mention your PAN and Assessment year? How did you confirm the refund amount?”
Akshay was unsure and shared the e-mail with him. The e-mail had come from <firstname.lastname@example.org>, which was a spoofed e-mail id. His consultant pointed out that the letter ‘e’ is missing in the e-mail id and informed him that that it indeed was a fake e-mail id. Akshay was all in a state of shock.
This is not a one off incident which has happened. There have been various cases reported across the country of tax payers receiving such fake e-mails. These e-mails are more common during the tax return filing time as tax payers await communication from the Income tax department.
If you are a tax payer who has received such an e-mail, be careful as it may be a phishing e-mail which would re-direct you to another website seeking your financial details like bank account number and other related details.
These kind of e-mails are camouflaged in a manner that one feels that it has come from an authentic e-mail id. The e-mail id would resemble the common ids used by CPC/ Income tax department. A wrong step could lead to compromise of one’s personal details and the person eventually becomes a victim of online fraud.
One could apply some basic checks before responding to such e-mails:
- Impromptu response should be avoided for electronic notices.
- Always cross check the authenticity of the e-mail id from which you have received the e-mail. The income tax department sends e-mail from the some common ids <email@example.com>, <firstname.lastname@example.org>, <email@example.com>. There are e-mails widely in circulation from spoofed e-mail ids which almost resembles the generic ids of the tax department. Do remember that the Income tax department would not use private service providers’ e-mail ids like Gmail, Yahoo etc. Any e-mail from personal e-mail IDs and private service providers should be ignored.
- Before responding to the notices, please refer to details appearing on the Income tax portal. Any demand against your PAN appears on Income tax portal and the amount mentioned in a notice can be easily cross checked. Do corroborate the details mentioned in the notice with the return of income filed by you in the earlier years. Further, after e-filing, most of the services or requests can be raised online on Income tax portal itself. Rather than going through the link mentioned in the e-mail, you may independently open the authentic website, which is a user friendly platform, <http://www.incometaxindiaefiling.gov.in> and check all the pending actions against your PAN.
- You may also contact the Income tax department help centre, if in doubt. Contact the Customer care of Centralised Processing Centre (CPC) to verify the correctness of the notice. The contact numbers are 1800 425 2229 / +91 80 2254 6500 / 1800 103 4455.
- Last but not the least, please consult your tax advisor in case of any mismatch of details / suspicion.
Being vigilant and being aware of the current developments is the key to tackle such notices. This could save you from being a victim of new age e-frauds, so think before you respond.
(Alfred Rodrigues, senior tax professional, EY also contributed to the article)
(Views expressed are personal)
(This article first appeared in The Financial Express)