PhishingPublished 23 Apr 2026

Spam and phishing targeting taxpayers | Kaspersky official blog

Source Kaspersky Security Blog

Description

How to identify tax-related phishing and fraud: fake portals, bogus crypto wallet verifications, and malicious files. We break down the steps you need to take to protect both your money and your data.

Impact

Victims risk financial loss through stolen credit card information and drained cryptocurrency wallets. Personal data such as taxpayer identification numbers, employment history, and bank details are harvested, enabling identity theft, fraudulent loan applications, account hijacking, and further social engineering attacks. Malware infections from malicious tax documents can compromise devices. Data collected by fake AI tax tools can be sold on the dark web or used for extortion. The overall impact includes financial theft, privacy breaches, and long-term fraud risks.

Defensive guidance

Users should file taxes themselves or use trusted, verified services. Avoid interacting with unsolicited tax-related emails or websites, especially those requesting sensitive information or downloads. Use reliable security solutions that block phishing sites and malicious downloads. Do not share personal or financial data with AI tools, especially online services; if AI is used, run it locally without uploading sensitive documents. Always verify communications through official tax authority channels and be wary of slight deviations in sender details. Encrypt sensitive tax documents and store them securely.

Summary

During tax season, cybercriminals deploy phishing campaigns impersonating tax authorities and related services across various countries. They use fake government portals to harvest credentials and credit card details, often charging fees for fraudulent tax deductions. Malicious files disguised as tax documents are distributed to infect victims' devices. Cryptocurrency holders are specifically targeted with fake tax compliance sites demanding wallet verification and seed phrases, enabling attackers to drain wallets. Additionally, fake AI-based tax assistance websites collect personal and tax data for malicious use. The threat exploits the urgency and complexity of tax filing to trick victims into divulging sensitive information.

References

kaspersky.com/blog/income-tax-phishing-bait/55637/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 23 Apr 2026, 16:06 UTC

References

Community reviews