New developments

During the 2025 Income Tax Campaign, remember that cybercriminals may try to deceive you by impersonating the Tax Agency through fraudulent emails (phishing) or SMS (smishing).

A phishing attempt has been detected by sending an email impersonating the State Tax Administration Agency (AEAT).

A phishing attempt has been detected by sending an SMS impersonating the State Tax Administration Agency (AEAT).

A campaign has been detectedSMS fraudulent scams that include a link to a website that impersonates the Tax Agency with a link to a form with the intention of stealing credentials and/or personal data.

A new phishing attempt has been detected using identity impersonation of the State Tax Administration Agency.

A fraudulent email campaign has been detected in which a link to a website impersonating the Tax Agency is attached, containing a form requesting identification data.

A new phishing scam impersonating the Spanish Tax Agency (AEAT) has been reported.

A new phishing campaign has been detected in which the identity of the Tax Agency is impersonated, directing users to a form on a fake website, requesting that taxpayer information be updated, providing numerous personal data, including the IBAN of the bank account.

A fraudulent SMS campaign has been detected in which a link is attached to a website that impersonates that of the Tax Agency with a link to a refund form in which bank card details are requested.

A fraudulent email campaign has been detected impersonating the Tax Agency and urging recipients to make a deposit into a bank account using a document PDF fake.