Fake Income Tax Refund Message
Fake Income Tax Refund Message | Photo Credits: Lynda.com

IT department recently encounters a new Fake Income Tax Refund Message scam. When we analyse further about the scam we came to know this is a Phishing one. The message came on a user phone and ask them to click on a link. Once the user click on the link it leads them to a portal that is the mirror image of State bank of India portal. Now, the portal ask them to enter some details like PAN Number, Full Name, Communication Address, Pincode, and Mobile Number. I post out the screenshot below.

State Bank of India Portal Fake Mirror Image | Image Credits: @beastoftraal

Yesterday, I also got a mail from Income Tax Department of India (the real one). In the mail they clear about this scam and ask me to don’t fall prey to any such kind of scam. Moreover, IT Department of India also post a tweet about this scam alert of December 13.

Now, coming to the analysis of this scam. A Twitter user analyse this whole scam process in detail. The scam starts with a message containing a bit.ly shorten link. Like in the Screenshot below.

Income Tax Fake Refund message | Image Credits: Twitter @beastoftraal

As we clearly see the message ask the user to click on the link which leads them to a further URL. That URL (also the portal) looks exactly like State Bank of India which in turn ask user some other details as we mention earlier in the post.

When Kartik reverse engineer this shorten URL he found it belongs to a russian domain i.e. http://erruza.ru. He analyses further to know there are a total of 4,028 link clicks on that shorten URL.

Income Tax Fake Refund Message Screenshot 2 | PC: Twitter @beastoftraal

Read also: IT Department Releases New Pan Card Rules Applicable from December 5

A tech enthusiast passionate about simplifying life through technology. A foodie at heart, who also enjoys crafting websites and optimizing content for search engine rankings. Dedicated to spreading positivity...

Leave a comment

Your email address will not be published. Required fields are marked *