2025
Examples of messages sent through technological channels impersonating the AEAT were detected in 2025. Do not answer these messages, they are an attempt to commit fraud by impersonating the Tax Agency.
A campaign has been detected SMS fakes that impersonate the Tax Agency with a notice about the 2024 Income Tax refund.
NOTICE: This SMS is accompanied by a link that should not be accessed.
SMS text:
Your 2024 personal income tax refund has been ordered. To receive the income, complete your personal information at https://xx.xx/.xxxxxx, Income 2024 section.
The link redirects to another page where the phishing/fraud is hosted.
Do not answer these messages, they are an attempt to commit fraud by impersonating the Tax Agency.
A type of fake email impersonating the Tax Agency has been detected coming from the following email account that DOES NOT EXIST at the Tax Agency: Contacto-031293@correo.aeat.es
Text of the email
We inform you that we have identified an outstanding balance related to the payment of your taxes. To avoid additional charges, such as interest, fines, or other legal consequences, we urge you to regularize your situation with the State Tax Administration Agency (AEAT) as soon as possible.
We remind you of the importance of carefully reviewing your pending payment to ensure all information is correct. To download the corresponding document and view related data, access the file available below.
We appreciate your commitment to fulfilling your tax obligations. Your collaboration with the AEAT is essential to promote development and strengthen the well-being of our nation.
NOTICE:
The email contains a ZIP attachment called Tax Document that should not be opened or saved.
A fake email campaign has been detected impersonating the Tax Agency, seeking to remind people when a deferral or installment payment is due and urging them to provide specific information.
NOTICE : The email has an attachment in ISO format that contains a malicious EXE file.
Text of email:
AEAT INFORMS REMINDER OF NEXT DEFERRED/INSTALLATION PAYMENT DUE 04/16/2025 No. *******77067DD. Expiration date (04/16/2025) TOTAL AMOUNT 98,157.38. Please provide the requirements indicated.
This is an automated message sent from an unattended email address.