- The National Tax Administration warns against a phishing campaign.
- Fake emails can lead to the theft of data and funds.
- The greatest threat comes from HTML attachments impersonating official documents.
The Tax Office warns: fake e-mails imitate official announcements
The scheme of operation is relatively simple, but very effective. Fraudsters send e-mails that look very similar to official correspondence from the tax office. The messages contain HTML attachments, which, when opened, may result in the interception of user data.
Let us emphasize this: these messages do not come from the servers of the National Tax Administration or the Ministry of Finance, even though they often give such an impression. This is a cynical attempt at fraud.
But how not to fall for criminals? Despite appearances, it is not difficult. A key element of verification is a thorough check of the sender’s address. Official messages are sent from the tax.gov.pl domain. Any other form should raise awareness. If the sender is e.g. kas@jkowalski.pl, we should be very careful.
In the case of such emails, attachments from unknown senders are particularly dangerous, as they may actually be a virus file. You should also be careful when the message contains links to external websites – they can also help thieves rob us.
Also pay attention to the tone of the email: whether the message puts pressure on you (e.g. threat of penalty or urgent payment).
Opening such a file may lead to the installation of malware on our equipment or the transfer of confidential data to criminals.

How to protect yourself?
Experts recommend following basic safety rules:
- do not open attachments from unknown sources,
- do not click on suspicious links,
- always verify the sender,
- If in doubt, contact the office directly.
These are simple steps that can protect against serious financial losses.
It is worth adding that the tax settlement period is a particularly dangerous time for Internet users, because cybercriminals then intensify their activities, taking advantage of the rush and stress of taxpayers. Impersonating institutions such as the National Tax Administration or the Ministry of Finance is becoming much more common, and fake messages often contain information about alleged tax refunds or the need for urgent additional payments. In practice, many people, wanting to quickly complete PIT formalities, lose their vigilance and click on suspicious links or open attachments, which significantly increases the risk of losing data and money.

Are you investing in cryptocurrencies? Be careful!
The growing number of such attacks shows that along with the popularization of cryptocurrencies, the activity of cybercriminals is also increasing. For users, this means one thing: digital security is becoming as important as the investment itself.