BREAKING :
How a Fake ITR Refund Message Led to a ₹1.5 Lakh Loss

How a Fake ITR Refund Message Led to a ₹1.5 Lakh Loss

A simple message promising an Income Tax refund turned into a costly mistake. Here’s how one phishing scam drained ₹1.5 lakh — and how you can avoid falling into the same trap.

Tax season often brings relief — especially when you’re expecting a refund. But scammers know this too.

In a recent case, a taxpayer lost ₹1.5 lakh after receiving a fake ITR refund message that looked completely legitimate. The message appeared to come from the Income Tax Department and claimed that a refund was pending.

Here’s how the scam unfolded.

📩 Step 1: The Fake Refund Alert

The victim received an SMS stating that a refund had been processed and required verification. The message included a link that closely resembled the official Income Tax Department portal.

The URL looked authentic — but it was a spoofed website.

🌐 Step 2: The Phishing Website

After clicking the link, the victim was redirected to a fake webpage designed to look like the official Income Tax e-Filing Portal.

The site asked for:

  • PAN number

  • Date of birth

  • Bank account details

  • Debit card information

  • OTP for “verification”

Everything appeared routine — but it wasn’t.

🔐 Step 3: Sharing the OTP

Once the victim entered the details, scammers initiated unauthorized transactions. The OTP shared for “refund verification” was actually used to approve money transfers.

Within minutes, ₹1.5 lakh was debited from the bank account.

🚨 Why This Scam Works

  1. Timing:During tax season, refund messages feel believable.

  2. Urgency:Messages often say “Act within 24 hours.”

  3. Realistic Websites:Fake portals mimic government branding.

  4. Trust Factor:Government names lower suspicion.

Cybercriminals rely on panic and excitement.

⚠️ Red Flags to Watch For

  • Refund messages from unknown mobile numbers

  • Links that don’t end in official government domains

  • Requests for debit/credit card details for refund processing

  • Asking for OTP over phone or website

Remember: The Income Tax Department never asks for confidential banking credentials via SMS or email.

🛡️ How to Protect Yourself

  • Always manually type the official portal address in your browser.

  • Never click refund links from SMS or WhatsApp.

  • Do not share OTP with anyone.

  • Enable transaction alerts on your bank account.

  • Report suspicious messages immediately.

If you fall victim:

  • Contact your bank immediately

  • File a complaint on the national cybercrime portal

  • Inform your local police station

Acting quickly can sometimes help freeze transactions.

💡 Final Takeaway

Scams today look professional and convincing. A single click on a fake ITR refund link can cost you your hard-earned money.

Always verify before you trust. When it comes to financial messages — caution is your best defense.

+