A fraudulent email has been identified that impersonates the Spanish State Tax Administration Agency (AEAT) and the Ministry of Finance with the aim of inducing the recipient to make a payment in cryptocurrencies under the pretext of an alleged international tax regularization.

The campaign employs advanced social engineering techniques using real tax terminology, regulatory references, and institutional visual appearance to increase the credibility of the message.

The objective of the attack is to make a payment to a cryptocurrency wallet.

Indicators of suspicion

• Unofficial domain usage: assistance.es

• Request for payment via cryptocurrency (ERC-20 / BTC)

• Visual impersonation of the Spanish Tax Agency (AEAT) and the Ministry of Finance

• Use of temporary urgency to pressure the recipient

IMPORTANT NOTE:The Spanish Tax Agency (AEAT) does not use blockchain wallets or request payments via cryptocurrencies.

Remember that the Tax Agency never requests confidential, financial or personal information, account numbers or card numbers, via SMS or email, nor does it attach any information such as invoices or other data.

If you have any questions, please go directly to the Electronic Office and check if you have any pending communications or notifications; Do not use links contained in SMS messages or emails.