Verify the service independently
TT CSIRT published an advisory on 20 April 2026 about a fraudulent website impersonating the Board of Inland Revenue’s e-Tax platform. The advisory is evidence of that campaign; it does not establish whether a new message you received is part of it.
Use an official government website or a contact already in your records to reach the tax service. Compare the exact host name before signing in. A logo, tax reference or familiar sender name can be copied.
Check the message you received
Paste the text and visible link. Remove taxpayer numbers, passwords and financial details. The result shows available domain information and message warnings. It does not access your tax account or verify whether a refund or liability exists.
- Open the official tax service independently.
- Check the notice inside your account or through an official contact.
- Avoid entering details through an unverified message link.
- Preserve the original if you need to report it.
If you submitted information
Contact the affected service through its official route. If you entered a reused password, secure the other accounts using it. If payment information was exposed, contact the financial institution. Use TT CSIRT’s current reporting instructions for incident details.
Questions about this check
Does the advisor check my tax balance?
No. It assesses the submitted content and available technical signals.
Should I treat every tax message as fraudulent?
Verify the specific notice through the official service. The existence of a phishing campaign does not determine every message’s legitimacy.
