Filed ITR? Your income tax refund email could be a scam | Here's what you should do

As income tax return (ITR) filing activity surges across the country, the Income Tax Department has raised an alarm over a growing number of phishing attempts targeting taxpayers. Fraudsters are posing as representatives of the tax authority and luring individuals with fraudulent refund promises.

In a public notice shared on social media platform X, the department cautioned citizens against a scam involving a fake email address — donotreply@incometaxindiafilling.gov.in. This spoofed address closely mimics the official government domain and is being used to send deceptive messages to those who have recently filed their ITRs.

How the scam works

Scammers are circulating emails claiming that an error occurred while computing the recipient's taxes, and a refund is due. The message prompts taxpayers to click on a link to resolve the issue — a trap designed to extract personal or financial information.

To protect users, the department stressed that any communication received from donotreply@incometaxindiafilling.gov.in should be treated as fraudulent. Users are urged not to click on links or provide any sensitive details through such correspondence.

Official clarification and safety guidelines

Reiterating its communication protocol, the Income Tax Department clarified that it never seeks personal information — such as passwords, OTPs, Aadhaar numbers, or bank account details — via email, phone, or SMS.

“If you’ve received an email about a tax calculation error followed by a refund offer, do not click on any links. It’s a phishing attempt,” the department warned.

To help citizens steer clear of such scams, the I-T Department issued the following safety tips:

• Avoid clicking on links in emails, messages, or WhatsApp forwards claiming to be from the Income Tax Department.

• Always verify emails received from official government domains ending in @incometax.gov.in.

• Report phishing attempts by forwarding such emails to webmanager@incometax.gov.in.

• Disregard messages or calls from unidentified or suspicious sources.

• Never share confidential details — including bank information, passwords, OTPs, or Aadhaar data — with anyone via electronic communication.

As phishing tactics become more sophisticated, the department urges taxpayers to remain vigilant and practice caution while dealing with any unexpected communication related to their income tax filings.