Income Tax: scam promises to anticipate refund – 05/19/2023 – Market

The Federal Revenue released a note this Friday (19) in which it warns taxpayers about an attempted coup by websites that promise to anticipate the refund of the 2023 Income Tax.

According to the agency, the sites speak of “incredible advantages” for the taxpayer to obtain a refund if they send data, documents and tax information. “In some cases, they even require the payment of fees in order to “speed up” a certain procedure”, informs the Revenue.

The agency informs that there is no advance refund. Batches are established by the Revenue, following the criteria of order of priority and delivery date,

The consultation of the first batch of refunds must be released by Wednesday (24th), and payment will be made on the 31st.

The definition of beneficiaries in the next four refund batches (one each month between June and September, always with payment on the last working day) will depend on the number of taxpayers included in each batch. “There is no anticipation of this list”, highlights the Revenue.

The institution also explains that it does not send electronic communications containing links or requests to fill in registration or tax data.

“The Federal Revenue does not send email, SMS, message on WhatsApp or Telegram requesting any information”, says the institution. Communication is usually made by letter and, therefore, the taxpayer is requested to keep the address updated.

The Revenue directs people to enter the official page of the institution (to remove doubts and make inquiries about the declaration through the e-CAC (Virtual Service Center) or in the Meu Imposto de Renda app.

How to check pending issues in e-CAC

1. The taxpayer must have a login and password on gov.br and be at the silver or gold level. Click here to find out how to reach the silver or gold level.

2. Once logged in, go to the option “My Income Tax (DIRF Statement)” and click on the “Processing” tab

3. Choose the “Mesh Pending” item. If there is any inconsistency, the reason for the retention will be informed. The taxpayer needs to correct and send an amending statement.

The income tax return must be submitted by 11:59 pm on May 31st. If the person who is obliged to settle the accounts does not meet the deadline, he will pay a fine. The minimum amount is R$ 165.74 and can reach 20% of the tax due in the year.

Scammers use Revenue images for fraud

The use of email, WhatsApp message or SMS alerting about problems and asking to send data or request the installation of programs is an attempt at an electronic scam called “social engineering”.

Issues related to Income Tax are commonly used by criminals who seek to attack devices to gain access to their personal data and, mainly, bank details. Using the Revenue’s logo, placing impactful titles that involve money gain or loss and causing taxpayer panic are the most frequent tricks of fraudsters.

Paulo Trindade, cyber threat intelligence manager at ISH Tecnologia, warns of criminal strategies. “They use emotional triggers such as urgency, scarcity and fear. The message asks you to correct something urgent, says you need to correct a failure or hits the organ that hurts the most in Brazilians: the pocket.”

The trick consists of trying to deceive the victim in order to install a program without the user noticing it in order to commit virtual crimes. He uses emails (called “phishing”), being able to customize the message using data from those who want to attack such as name, CPF and address.

The coup attempt is accompanied by a link (text with blue underlining), which would supposedly take the person to the Revenue website, or else an attached program that needs to be installed.

“This link installs malware (malicious software that is designed to damage systems, steal data and even slow down the computer or cell phone), which can monitor the user’s browsing and start collecting data when the person enters a bank”, explains the CEO of the cybersecurity company AHT Security, Emilio Simoni.

Cybersecurity experts recommend that the user pay attention to the following points

• Email address is usually from a free provider and has no relationship with the cited body

• URL address is not that of the official Revenue website

• URL address with change of letters for similar spellings like changing the vowel “O” for zero, or using the vowel “I” capital as the consonant L

• Emails that contain links, attached files, and apps

• Messages with misspellings in the title or body text

From the moment the user is attacked, the user can be exposed to any type of situation such as slowness in the device, use of the machine to respond to the attacker’s commands, use of personal data to create false digital accounts to apply for loans or even invasion of the bank account and withdrawal of the entire amount.

“The victim can be extorted in many ways and using the Income Tax is a bait. Whenever you detect messages that activate emotional triggers, stop and think. Never enter a link that they sent you by email. The tip is to always be suspicious” , says Trinidad.

Antivirus prevention and avoiding search engines

Cybersecurity experts highlight other measures to be adopted by the taxpayer. “It is recommended to install an antivirus on your computer and cell phone, keeping it up to date. Another tip is to avoid looking for the address in search engines, type directly the URL of what you are looking for and do not click on links that were sent by email or WhatsApp” , explains Simoni.

Another care is not to share the computer or cell phone with children and adolescents. “Children can download games and they don’t have the same care as adults. These programs that are downloaded can have malware, viruses and other threats, which will install devices on machines that compromise security. Therefore, the computer or cell phone with bank data or data that is used for work should not be shared”, says Trindade.

Experts also recommend avoiding the use of public internet networks and being careful when downloading applications related to the Federal Revenue Service. Only use official stores (such as the Apple Store or Play Store) and check that the provider is the Brazilian Information Service, which is responsible for federal government applications.