Tax Identity Theft via WhatsApp
WhatsApp messages impersonating tax authorities claim refunds are pending or accounts are under review, directing recipients to external sites that harvest the personal data needed for fraudulent tax filings.
Part of: Tax Identity Theft
Last reviewed: 1 June 2026
Tax authority impersonation via WhatsApp exploits the trusted messaging environment to deliver the same urgent refund or account review scenarios used in email phishing, but with added psychological weight — a personal message feels more targeted and authoritative than a bulk email.
The attack is particularly effective in regions where tax authorities have begun using WhatsApp for official communications, creating genuine ambiguity about whether a message is legitimate.
How this scam works on WhatsApp
A WhatsApp message arrives from a number claiming to be the tax authority's 'refund department', stating that the recipient has an unclaimed refund that will expire if not claimed within a short window. A link leads to a convincing fake government portal where the recipient enters their taxpayer ID, date of birth, and bank account details to 'process the refund'.
Other variants claim the recipient's account has been flagged for an audit and that they must submit additional documentation immediately to avoid penalties. A link or attachment allows the supposed documentation to be submitted — but actually harvests all entered details.
Some operations use WhatsApp Business accounts set up with official-sounding names and government-style profile photos to add credibility. They may also use WhatsApp's auto-reply feature to provide convincing responses to verification questions from suspicious recipients.
Common red flags
- WhatsApp message from an unknown number claiming to be from a tax authority
- Refund claim or audit warning requiring action within 24 to 48 hours
- Link in a WhatsApp message leading to a government-style portal outside an official government domain
- Request for taxpayer ID, bank account number, or date of birth via WhatsApp
- WhatsApp Business account name that includes tax authority language without any verifiable official profile
- Message that discourages you from calling the official authority to verify the contact
How to protect yourself
- Contact your tax authority through the official number on their website if you receive any WhatsApp claiming to be from them
- Never click links in WhatsApp messages claiming to be from a government authority
- Never provide taxpayer identification numbers or bank account details via WhatsApp
- Check your official government tax account online directly for any legitimate refund or audit notifications
- Block and report the number immediately using WhatsApp's in-app function if the message appears fraudulent
- Enable WhatsApp two-step verification to protect your own account from compromise and subsequent impersonation
How to report it
- Report the number to WhatsApp using the in-app 'Report' function in the chat
- Forward details to your national tax authority's fraud reporting channel so they can warn other taxpayers
- File a report with your national cybercrime unit if personal or financial data was submitted
Frequently asked questions
Does my tax authority use WhatsApp for official communications?
Most major tax authorities do not use WhatsApp as a primary official communication channel. Where some agencies do send WhatsApp messages, they are typically informational and do not ask for personal data or link to external portals. Any message via WhatsApp requesting ID numbers or financial details should be treated as fraudulent until verified through official channels.