A phishing attempt has been detected by sending an SMS impersonating the State Tax Administration Agency (AEAT).

An electronic registration screen appears, with an electronic form for submitting documents and applications to the Tax Agency. First, it requests your name and surname along with your mobile phone number.

The objective of the attack is theft of credentials and/or personal data.

Domain(s) involved: sede.agenciatributaria.es.sede-online.es

Fake page (final URL): https://sede.agenciatributaria.es.sede-online.es

Indicators of suspicion

• Sender domain unofficial or inconsistent with the impersonated entity.

• Links that do not belong to legitimate domains (.aeat.es / .gob.es).

• Use of urgency, threat, or psychological pressure.

• Request for credentials or confidential information.

Remember that the Tax Agency never requests confidential, financial or personal information, account numbers or card numbers, via SMS or email, nor does it attach any information such as invoices or other data.

If you have any questions, please go directly to the Electronic Office and check if you have any pending communications or notifications; Do not use links contained in SMS messages or emails.