Income tax refund ‘Manual Verification’ email could be a trap: Know how to identify this fraud and avoid – The Economic Times

Clipped from: https://economictimes.indiatimes.com/wealth/tax/income-tax-refund-manual-verification-email-could-be-a-trap-know-how-to-identify-this-fraud-and-avoid/articleshow/122813008.cms

Image for Income tax refund 'Manual Verification' email could be a trap: Know how to identify this fraud and avoidET OnlineITR refund manual verification

Have you recently received emails claiming to be from the Income Tax department, asking you to complete manual verification of your personal details? The government has cautioned the taxpayers that this could potentially be a fraudulent or phishing email.

Income Tax Guide

Income Tax Slabs FY 2025-26Income Tax Calculator 2025New Income Tax Bill 2025

As the tax filing season begins this year, cybercriminals are actively trying to exploit unsuspecting taxpayers by sending phishing emails that look official. These emails might prompt taxpayers to click on a link, fill out personal or financial information, or download an attachment for “manual verification” or “e-verification.”

The government’s PIB Fact Check Unit has confirmed that this is a fake email and has advised people to refrain from clicking on suspicious links or sharing personal, financial, or sensitive information through email, SMS, or call.
The Income Tax department may ask for personal information through e-mail; however, it never sends e-mails soliciting your PIN numbers, passwords, or any similar access details for credit cards, banks, or other financial accounts.
The message circulating states that:
“Dear Taxpayer,
This is an official notification regarding your Income Tax Refund for Assessment Year 2024-25. Amount eligible: Rs 60,000.
Why manual verification?
As per latest RBI & PMLA norms, all refunds above Rs 25,000 require recipient confirmation to prevent unauthorized payouts and protect taxpayers.”

Also read: How to download Form 26AS for ITR filing FY 2024-25 (AY 2025-26)?

The government has urged taxpayers to remain vigilant, verify the authenticity of any communication, and report suspicious emails immediately.

What is ‘phishing’?
Phishing is the process of attempting to acquire sensitive information, such as usernames, passwords, and credit card details, by masquerading as a trustworthy entity in electronic communication. Phishing is typically carried out by e-mail or instant messaging, and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one.


Income tax department has advised the following on receiving phishing mail:

If you receive an e-mail from someone claiming to be authorised by the Income Tax Department or directing you to an Income Tax website:
Do not reply.
Do not open any attachments. Attachments may contain malicious code that will infect your computer.
Do not click on any links. If you clicked on links in a suspicious e-mail or phishing website, then do not enter confidential information like bank account or credit card details.
Do not cut and paste the link from the message into your browsers; phishers can make the link looks real, but it actually sends you to different websites.
Use antivirus software, anti-spyware, and a firewall, and keep them updated. Some phishing e-mails contain software that can harm your computer or track your activities on the internet without your knowledge. Antivirus, anti-spyware software, and firewalls can protect you from inadvertently accepting such unwanted files.

How to report income tax-related phishing and suspicious mail?

If you receive an e-mail or find a website you think is pretending to be of the Income Tax Department, forward the e-mail or website URL to webmanager@incometax.gov.in. A copy may also be forwarded to incident@cert-in.org.in.
You can also forward the message as received or provide the internet header of the e-mail. The internet header has additional information to help us (the I-T department) locate the sender.
After you forward the e-mail or header information, delete the message.
If you receive a phishing mail not pertaining to the Income Tax Department, forward the same to incident@cert-in.org.in

Leave a Reply