Tax Refund Scams: Beware Fake Tax Office Messages
As tax season peaks, a tax refund scam circulates via emails and SMS. Learn how to spot messages and protect your data.
As Poland’s tax season peaks, scammers intensify phishing campaigns. Many receive messages claiming a tax refund; this tax refund scam pressures haste and tricks people into sharing data.
How the fraud works
Scammers send emails or SMS messages that look official. Moreover, they copy logos and formal language from tax offices. Consequently, recipients often trust the message at first glance. The message may say you have a refund, an urgent underpayment, or an error in your return. However, a single click often leads to a fake website. There, crooks prompt you to enter login credentials or bank details. In addition, they sometimes ask for PESEL (the national ID number) or other personal data. Therefore, one mistake can expose your bank account or identity.
tax refund scam: how it works
Attackers tailor messages to specific groups. For example, younger people often get SMS messages. Older people may receive longer emails. Moreover, attackers adapt language to a recipient’s city and apparent age. Consequently, the scam looks more believable. Scammers also call by phone. They may claim they represent the tax office. However, legitimate offices rarely demand immediate action by phone. In addition, they never request full passwords through a link.
Why the risk rises now
The calendar drives the threat. At the end of April, many file PIT declarations. Therefore, people act quickly and feel stressed. Consequently, scammers ramp up activity to exploit that haste. Also, criminals reuse successful messages from previous years. They update links and sender addresses. However, the underlying trick remains the same: create urgency and ask for data or payment.
Practical steps to protect yourself
First, do not click links from unknown messages. Second, verify the sender address and phone number. Moreover, contact the tax office through its official website or phone lines. Third, do not provide PESEL, bank login, or two-factor codes. In addition, report suspicious messages to your bank and to the Cybersecurity authorities. Finally, use up-to-date antivirus software and enable two-factor authentication where possible.
Source: Read original article
📚 Looking for more help settling in Poland? Browse our complete Expat Guides.
