Beware of fake emails from the "tax office": CERT Orange warns against scammers
Experts from the CERT Orange Polska team have published an urgent warning regarding a new scam campaign on the Polish internet. Criminals are impersonating the National Revenue Administration to phish for sensitive data from citizens, including payment card information.
The attack mechanism is based on sending emails that look like official correspondence from the tax office. In the body of the message, the scammers inform the recipient of alleged irregularities in tax filings or the need to make an additional payment. To resolve the issue, the recipient is asked to click on an attached link.
After clicking the link, the user is redirected to a fake website that looks deceptively like an official government portal. There, the victim is asked to provide login credentials for electronic banking or payment card numbers. In this way, criminals can gain access to the money held in the bank account.
Specialists remind the public that the National Revenue Administration never sends messages with payment links, nor does it ask for payment card details via email. Any message that raises doubts should be treated as an attempted scam.
If you have received a suspicious email, do not click on any links and do not download any attachments. It is best to delete such a message from your inbox immediately. In case of any doubts regarding tax settlements, it is worth checking your account status yourself directly on the podatki.gov.pl website or contacting your local tax office.