Warning when filling out the tax refund: You should not fill out this form
The official tax portal in Germany, ELSTER, has warned taxpayers about a wave of new phishing messages impersonating the German tax authority (Federal Central Tax Office). The messages mislead recipients into believing that they have a tax refund – a fake form aimed at stealing their sensitive data.
Emails arrive with the subject "Review of Tax Refund under § 218 AO". It is claimed that the automated system "Einkommensteuerveranlagung" has detected a refund in your favor. To receive the alleged amount quickly, you are asked to fill out the "Erstattungsformular" (refund form) via a link attached to the message, emphasizing that it must be filled out "vollständig und wahrheitsgemäß" (completely and truthfully). The message is written in formal language and includes references to legal provisions and an address that appears to be that of a real government agency, aiming to create an impression of seriousness and formality to gain trust. However, behind that is a fraud attempt seeking to obtain your financial and personal data. A dangerous link leading to a fake page The link in the email does not lead to an official site of the Bundeszentralamt für Steuern, but to a fake site that mimics the authorities' page. In this fake "Erstattungsformular", you are asked to enter sensitive data, including: Account login information Bank account details Credit card information This information can be used not only to withdraw money directly from your accounts but also for identity theft or further fraud in your name. The danger lies in the fact that these messages and sites are often designed professionally, making it difficult for many to detect that they are fake at first glance. Nevertheless, there are clear warning signs indicating fraud, the most notable of which are: A suspicious or unfamiliar sender address An impersonal salutation such as: "Sehr geehrte Damen und Herren" (Dear Sir or Madam) The use of the promise of "Steuererstattung" (tax refund) as bait to attract the victim.
Intended time pressure between 02.02.2026 and 09.02.2026 One of the most striking points is the very short deadline: it is said that the form must be submitted between 02.02.2026 and at the latest 09.02.2026 (at the latest 09.02.2026). Such short periods are considered typical in fraud schemes, as they aim to: Prevent you from calmly verifying the authenticity of the message Dissuade you from contacting the official entity to ask them Create a sense of urgency and psychological pressure that drives you to act quickly and without scrutiny In this way, the fraudsters bet that the victims will not take the time to think or check, but will click on the link and fill in the data immediately.
How should you act correctly? Experts, as well as the official ELSTER portal, recommend following these steps when receiving such messages: Do not open any attachments included in the email. Do not click on any links in the message, no matter how official they seem. Move the message directly to the Spam folder or delete it. Do not reply to the email or send any personal or financial data. ELSTER confirms that such fraudulent methods are not only used in the name of the Bundeszentralamt für Steuern, but also spread 'Fake-Steuerbescheide' and 'Fake-Rechnungen' (fake tax assessments and fake invoices) allegedly issued by ELSTER or the relevant Finanzamt (tax office). The golden rule: Only use official ELSTER or Finanzamt channels. To avoid falling into the trap, all tax-related matters should be handled exclusively through: The official ELSTER portal Or direct communication with your responsible Finanzamt. If you have doubts about a particular message, contact the official body yourself, but: Only use the phone numbers and contact addresses found on official websites or on your old official letters. Never use the contact details provided in the suspicious email. What the tax authorities never do via email. The tax authorities in Germany emphasize the following points: The tax office does not send 'Steuerdaten' (tax data), 'Bescheide' (tax assessments), or 'Rechnungen' (invoices) as attachments in emails. They do not request any sensitive information via email such as: Tax numbers (Steuernummer) Bank account details Credit card numbers PINs or passwords.
The detailed information about „Nachzahlungen“ (amounts owed by you) or „Erstattungen“ (amounts refunded to you) is never mentioned directly within the text of the email. You are only informed about them through official decisions (Bescheide) or via the ELSTER portal, or regular mail. By paying attention to these rules and constantly verifying the sender's identity, taxpayers in Germany can protect themselves from falling victim to cybercriminals who exploit the complexity of tax issues for illegal gains.