How to Identify and Report Phishing Emails and Fake Tax Websites

Fake Income Tax Emails: Don’t Fall for the Trap

Have you ever received an email saying your PAN is being deactivated or your refund is stuck? If it looked official and made you panic — you’re not alone. Cybercriminals are getting better at mimicking the Income Tax Department to trick people into giving away personal and financial information.

Step 1: Always Check the Email ID

Genuine emails from the Income Tax Department only come from these domains:

@incometax.gov.in
@incometaxindia.gov.in

Anything outside these — like a Gmail, Yahoo, or even a close-looking fake like incometax-india.com — is a red flag. Hover your mouse over the email address (not just the sender’s name) to see the real domain.

Common Signs of a Scam Email

Scammers follow certain patterns. If you notice any of these, stay alert:

Scare tactics – Messages saying things like “Your PAN will be blocked” or “Legal action will be taken immediately” are designed to scare you into acting without thinking.
Asking for private info – The real IT department never asks for your OTPs, passwords, debit card PINs, or bank login credentials over email or SMS.
Weird language or spelling – Bad grammar, awkward formatting, and strange phrases are classic phishing giveaways.
Links that feel off – Always hover (don’t click!) on a link before opening. If it doesn’t lead to a .gov.in site, don’t trust it.
No DIN on notices – Real notices always include a Document Identification Number (DIN). If there’s no DIN, it’s probably fake.

What to Do If You Get One

If something doesn’t feel right:

Don’t reply or download anything.
Mark the email as spam or phishing in your inbox.
Run an antivirus scan on your device.
Report it immediately (see below).

Where to Report Fake Emails

Forward the suspicious message to:

webmanager@incometax.gov.in
incident@cert-in.org.in

Include the full message with headers if you can. This helps cyber experts track down where it came from. After that, delete the email from your inbox and trash.

Want to Double-Check a Tax Notice?

The Income Tax Department lets you verify notices online:

Go to incometax.gov.in
Click on "Authenticate Notice/Order Issued by ITD"
Enter the DIN, your mobile number, and OTP
You’ll get a result confirming whether it’s real

Final Thoughts

These scams are getting sneakier, but a bit of caution goes a long way. Before reacting to any urgent-sounding message, take a minute to verify. When in doubt, check directly on the IT portal — not through links in your email.