In recent weeks, numerous individuals have reported receiving emails prompting them to download their e-PAN card. These emails often appear official, causing concern and confusion. However, the Press Information Bureau (PIB) Fact Check unit has issued a warning, confirming that these emails are fake and part of a phishing scam.

What's the Scam?

Cybercriminals are sending emails that mimic official government communications, urging recipients to download their e-PAN card through a provided link. These emails may contain subject lines such as "Download e-PAN Card Online: A step-by-step guide" or "Get Your PAN 2.0 Card". The sender's email address may appear legitimate but often contains anomalies like spelling errors or unusual domains.

Clicking on these links can redirect users to fraudulent websites designed to steal sensitive personal and financial data. These fake websites often resemble official Income Tax Department portals, tricking users into entering their PAN number, Aadhaar number, bank account information, passwords, and other personal credentials. This information can then be used for identity theft, financial fraud, or unauthorized access to accounts. In some cases, the links or attachments may install malware on the user's device, allowing scammers to steal passwords or track activity.

Red Flags to Watch Out For

Several red flags can help you identify these fraudulent emails:

• Suspicious Sender Email Address: The sender's email address looks unrelated to the Income Tax Department or contains unusual characters or domains.
• Poor Grammar and Spelling: The email contains grammatical errors or typos.
• Unsolicited Requests: The email asks you to click on links or download attachments unexpectedly.
• Urgent or Threatening Language: The email uses urgent or threatening language to force you to act quickly.
• Requests for Personal Information: The email asks for sensitive information like bank details, passwords, or PIN numbers.
• Generic Greetings: The email uses generic greetings like "Dear Customer" instead of your name.

How to Stay Safe

To protect yourself from falling victim to these scams, the government and cybersecurity experts recommend the following safety measures:

• Verify the Sender: Always check the sender's email address carefully. Legitimate government communications will come from domains ending in ".gov.in" or ".nic.in".
• Never Click Suspicious Links: Do not click on any links or download attachments in unsolicited emails.
• Access e-PAN Services Through Official Portals: Obtain e-PAN services only through the official Income Tax Department website or NSDL/UTIITSL portals.
• Keep Software Updated: Ensure your antivirus, anti-spyware, and firewall software are up to date.
• Report Suspicious Emails: Forward any suspected phishing emails to webmanager@incometax.gov.in and incident@cert-in.org.in.
• Be Skeptical: Be wary of any email that asks for your personal or financial information. The Income Tax Department has clarified that it does not request such details through email.

What to Do If You've Fallen for the Scam

If you suspect you have clicked on a malicious link or provided personal information:

• Change Passwords: Immediately change your passwords for sensitive accounts, such as your bank account, email, and social media.
• Scan for Malware: Run a full scan of your device using updated antivirus software.
• Contact Your Bank: Inform your bank or financial institution about the incident.
• Report to Authorities: Report the scam to the National Cyber Crime Reporting Portal or your local police station.

By staying informed and following these guidelines, you can protect yourself from e-PAN card download scams and other phishing attempts. Always exercise caution when handling unsolicited emails and prioritize the security of your personal and financial information.