The Government of India has issued a public alert warning citizens against a fraudulent email circulating with the label Press Information Bureau (PIB) falsely asking recipients to download an “e-PAN Card”. Authorities warned that the message was part of a phishing attempt to obtain sensitive financial information and urged people not to interact with such communications.
Read also | How a maid conducted a fake ED raid at an elderly couple’s house in Delhi
The warning was shared on social media, where the government clarified that the email was not legitimate and advised recipients to remain vigilant.
In a post on X, the government wrote: “Have you also received an email asking you to download your e-PAN card❓
⚠️This email is #Fake
✅ Do not respond to any emails, links, calls and texts asking to share financial and sensitive information
➡ Details on reporting phishing emails: https://incometaxidindia.gov.in/pages/report-phishing.aspx”
What a fraudulent e-PAN email looks like
The fraudulent e-mail allegedly carries the PIB label in an attempt to appear official and trustworthy. Recipients are asked to download an electronic PAN card, a requirement that cyber security experts say is a common tactic by attackers to lure individuals into clicking on malicious links or downloading infected files.
Officials stressed that these emails are designed to collect personal and financial information. Once a user clicks on a malicious link or opens a malicious attachment, attackers can gain access to sensitive information or infect the device with malware.
Income Tax Department Alert on Phishing Emails
The Income Tax Department has reiterated that it does not request confidential financial information through email communication.
According to the ministry’s advisory: “The Income Tax Department does not request detailed personal information through email.”
Read also | Sebi warns investors against fake STT announcements and cautions against fraud in the market
It further stated: “The Income Tax Department does not send emails asking for your PIN numbers, passwords or similar access information to credit cards, banks or other financial accounts.”
What is phishing and how does it work?
Phishing refers to cyber fraud in which attackers impersonate trusted institutions in order to obtain sensitive information such as usernames, passwords and credit card information.
Such attacks often come via emails or instant messages that appear to come from legitimate organizations. Victims may be redirected to a fake website that looks like an official portal, where they are prompted to enter personal information.
Read also | How fake invoices duped BlackRock Unit into a $400 million loan
The Income Tax Department explains: “Phishing is the process of attempting to obtain sensitive information such as usernames, passwords and credit card details by impersonating a trusted entity in electronic communications.”
What to do if you receive a suspicious tax email
Authorities have issued clear guidelines for individuals who come across emails that claim to be from the Income Tax department or direct them to tax-related websites.
- Do not respond to suspicious emails.
- Do not open attachments that may contain malicious software capable of infecting your device.
- Do not click on links embedded in such emails.
Avoid copying or pasting suspicious links into your web browser, as phishing links may look genuine but redirect to fraudulent sites.
Officials also recommend updating anti-virus, anti-spyware software and firewall protection because some phishing messages contain hidden programs designed to monitor online activity or compromise systems.
How to report phishing emails in India
The government urged recipients of suspicious tax-related messages to report them immediately.
Read also | Insurance Fraud: Hospitals admit fake patients, create fake medical records
If the email appears to be from the Income Tax Department, it can be forwarded to webmanager@incometax.gov.in. Authorities also recommend sending a copy to incident@cert-in.org.in, the National Cyber Incident Response Centre.
After forwarding a message or its web header, users should delete the email from their inbox.
For phishing messages not related to the Income Tax Department, citizens can directly report them to incident@cert-in.org.in
