These emails, often appearing genuine, carry subject lines such as “Download e-PAN Card Online: A Step-by-Step Guide" and may seem like they’re from government departments. However, they are designed to trick recipients into clicking suspicious links, downloading malware, or sharing personal and financial details. The Income Tax Department does not send emails requesting PINs, passwords, or banking information, nor does it ask users to download documents via third-party links.

Phishing is a fraudulent method to steal sensitive data like bank account numbers, PAN, Aadhaar, credit card details, or passwords. The consequences can be severe, ranging from identity theft to financial fraud.

What Should You Do?

• If you receive an email from someone claiming to be authorised by the Income Tax Department or directing you to an Income Tax website:
• Do not reply.
• Do not open any attachments. Attachments may contain malicious code that will infect your computer.
• Do not click on any links. If you clicked on links in a suspicious e-mail or phishing website, then do not enter confidential information like your bank account, credit card details.
• Do not cut and paste the link from the message into your browser; phishers can make the link look like a real one, but it sends you to a different website.
• Use anti-virus software, anti-spyware and a firewall and keep them updated. Some phishing emails contain software that can harm your computer or track your activities on the internet without your knowledge. Anti-virus & Anti-spyware software and a firewall can protect you from inadvertently accepting such unwanted files.

How To Report It:

If you receive an e-mail or find a website you think is pretending to be of Income Tax Department, forward the e-mail or website URL to webmanager@incometax.gov.in​​​​​​​​​​​​​​​​​. A copy may also be forwarded to incident@cert-in.org.in

You may forward the message as received or provide the Internet header of the e-mail. The Internet header has additional information to help us locate the sender.

After you forward the e-mail or header information to us, delete the message.
If you receive a phishing mail not pertaining to the Income Tax Department, forward the same to incident@cert-in.org.in.