“Dear taxpayer: we inform you that the computer system has identified a pending tax refund associated with your NIF (Tax Identification Number). To avoid processing delays, please confirm your bank details through the secure portal. The procedure is quick and mandatory for refund validation,” states the body of one of the fake emails shared by the AT on its portal today, which then provides a malicious link.
This new fraud alert—the seventh issued by the AT since the start of the year—shows several examples of emails, most of which use the AT’s logo and promise refunds while providing malicious links that, if opened, may grant access to the recipient’s relevant data, notably banking information.
In another example of a fraudulent email shared by the AT in this new alert, the message includes fields for people to enter their bank card details (number, expiration date, and CVV).
Faced with these situations, the AT stresses that such messages should be ignored and deleted, as they aim “to persuade the recipient to access malicious pages by clicking on the suggested links or to make improper payments.”
