Cybercriminals impersonate the treasury, informing about the alleged reimbursement of tax overpayment – says the Cert Polska team operating at the NASK Institute. As experts emphasize, the goal is to steal personal data and payment of the payment card.
In the sent email messages, fraudsters inform about the alleged need to confirm the recipient's data in order to reimburse the tax overpayment.
Tax refund. Fraudsters use PIT settlements
“The content includes a referring link to the page where you should 'confirm' data. Note – the website resembles an official government website” – we read in the NASK message.
As emphasized by NASK experts, supplementing data (personal and payment card) on a fake website may result in their theft by cyber criminals.
How to defend yourself against fraudsters?
NASK also issued several recommendations on how to defend against fraudsters.
“Keep calm. Cybercriminals play on our emotions – alleged refund is a great lure. Think twice. Receiving a refund does not require the provision of a payment card data” – says NASK.
“Do not trust the links and attachments. Before clicking, check if the page address coincides with real data – pay attention to typos or unusual extensions. Check authenticity. If you have doubts, do not click on the link. Enter the government page and log in in the way you usually do it” – we read.
“All suspicious messages to verify experts from the CERT Polska team, reporting an incident through this page or sending it to: cert@cert.pl” – emphasizes NASK.
Source of the main photo: Shutterstock