Reporting and Identification of Phishing, Fraudulent Refund
E-mail Scams and Fake Income Tax Web Sites
Disclaimer:
The Income Tax Department does not request detailed personal information through
e-mail.
The Income Tax Department does not send e-mail requesting your PIN numbers, passwords
or similar access information for credit cards, banks or other financial accounts.
Identification of phishing / fraudulent refund
e-mails:
Phishing is the process of attempting to acquire sensitive information such as usernames,
passwords and credit card details by masquerading as a trustworthy entity in an
electronic communication. Communications purporting to be from financial institutions,
popular social web sites, auction sites, online payment processors or IT administrators are commonly
used to lure the unsuspecting public. Phishing is typically carried out by e-mail
or instant messaging and it often directs users to enter details at a fake website
whose look and feel are almost identical to the legitimate one.
If you receive an e-mail from someone claiming to be the authorized by Income Tax Department or directing you to an Income Tax website:
Do not reply.
Do not open any attachments. Attachments may contain malicious code that will infect
your computer.
Do not click on any links. If you clicked on links in a suspicious e-mail or phishing
website then do not enter confidential information like bank account, credit card
details.
Do not cut and paste the link from the message into your browsers, phishers can
make link look like real, but it actually send you to different websites.
Use anti-virus software, anti spyware, and a firewall and keep them updated.
Some phishing e-mails contain software that can harm your computer or track your
activities on the internet without your knowledge. Anti-virus & Anti-spyware software
and firewall can protect you from inadvertently accepting such unwanted files.
Reporting:
If you receive an e-mail or find a website you think is pretending to be of Income
Tax Department, forward the e-mail or website URL to
phishing@incometaxindia.gov.in. A copy may also be forwarded to
incident@cert-in.org.in
You may forward the message as received or provide the Internet header of the e-mail.
The Internet header has additional information to help us locate the sender.
After you forward the e-mail or header information to us, delete the message.
If you receive a phishing mail not pertaining to the Income Tax Department, forward
the same to incident@cert-in.org.in
