Fake Income Tax Notice or Refund Message? How to Check If It Is Genuine in 2026, the DIN Rule and What to Do If You Clicked
Every genuine income tax notice has a DIN and appears on the e-filing portal; a message asking you to click a link for a refund is a scam.
Hansaben, a retired teacher in Junagadh, got an SMS last week saying her refund of Rs 15,490 was approved and she had to update her bank details through a link. The next day a WhatsApp message brought a file named IT Refund.apk. Her son Ketan, a cloth trader, received an email with a notice demanding Rs 2.8 lakh within 24 hours to avoid arrest, sent from a Gmail address.
Fake income tax messages rise every year when refunds are processed and notices go out after the filing season. They copy the department's logo and language well, but they fail a few simple checks. Here is how to tell a genuine notice from a scam in 2026, and what to do if you have already clicked.
Our team checks any notice or message you receive, and replies to genuine notices on your behalf. Call or WhatsApp +91 82005 28355, or see the details at the end of this guide.
Five checks for any income tax message
- DIN: every notice, order or letter from the department must carry a computer-generated DIN. One without it is generally treated as invalid.
- Your portal account: log in to incometax.gov.in. Genuine notices appear under Pending Actions, in e-Proceedings or the Worklist.
- Authenticate Notice: the e-filing portal lets anyone check a notice using its DIN, or using PAN, assessment year, section and date.
- The sender: official emails come from incometax.gov.in addresses, and genuine links lead only to that website. Check the spelling closely.
- Payment: tax is paid only through challans on the portal or authorised banks, never into a person's bank account or UPI ID.
What the department never does
- Ask for secrets: PINs, passwords, OTPs or card details by email, SMS or phone.
- Send apps: APK files, or requests to install screen-sharing apps.
- Send refund links: refunds go straight to the pre-validated bank account named in your return. See why refunds get stuck.
- Threaten arrest by phone: or demand payment within hours.
Common scams in 2026
- Refund approved: messages with a link to update bank details.
- PAN deactivated: messages about PAN-Aadhaar penalties with a link. The real rule is explained in our guide to an inoperative PAN.
- Fake demands: notices for high-value transactions or mismatches, with a payment demand.
- Fake officers: calls offering to settle a case for cash.
- GST versions: fake GST notices or cancellation threats sent to traders.
GST notices too
- Central GST: communications carry a CBIC-DIN that can be checked on the CBIC website.
- State GST: notices appear on the GST portal under View Notices and Orders.
- Reading them: see how to read a GST notice.
If you clicked or paid
- Stop: do not enter anything more, and uninstall any app you installed.
- Bank: call your bank to block cards and UPI, and change your net banking password.
- Report fast: call 1930 or file on cybercrime.gov.in within the first hours, when there is the best chance of freezing the money.
- E-filing account: change your password, turn on the higher-security login, and check that the bank account and email on the portal are unchanged.
- Phishing emails: forward them to webmanager@incometax.gov.in.
If the notice is genuine
- Note the deadline: for example, 15 days for a defective return notice, or 30 days to respond to a proposed adjustment, as stated in the notice.
- Reply on the portal: with documents, before the deadline. Ignoring a notice leads to an order passed without your side.
- Read it right: see our guide to reading and replying to income tax notices.
Back to Hansaben. Her refund status on the portal shows it was already sent to her pre-validated bank account, so the SMS was fake; the APK file is deleted unopened and the number is reported on 1930. Ketan's email had no DIN, failed the Authenticate Notice check and came from a Gmail address, so it is forwarded to webmanager@incometax.gov.in. His portal does show one genuine intimation, proposing an adjustment for a TDS mismatch with 30 days to respond, and that is the one he brings to us.
How we help
- Checking any notice or message for authenticity
- Replies to genuine income tax and GST notices
- Refund tracking and reissue requests
- Securing your e-filing account and bank details
- Fixing TDS, AIS and return mismatches
- Representation before the department
Gadhia Associate has been in practice since 2007 and has handled work for over 7,000 clients, with a 5.0 Google rating from more than 100 reviews. Individuals and businesses from Junagadh, Rajkot, Keshod, Veraval and Porbandar come to our Junagadh office, where same-day appointments are available. Notices for clients elsewhere are handled online.
Got a notice or message and not sure it is real? Send it to us before you click or pay. Call or WhatsApp +91 82005 28355, or message us on WhatsApp. The first consultation is free.
Frequently asked questions
How can I check if an income tax notice is genuine?
Look for the DIN, check it with the Authenticate Notice service on the e-filing portal, and see whether it appears under Pending Actions in your account.
Does the income tax department send refund links by SMS?
No. Refunds go directly to the pre-validated bank account in your return.
What is a DIN on an income tax notice?
A unique computer-generated number on every communication from the department. A notice without one is generally invalid.
What should I do if I clicked a fake income tax link?
Block your cards and UPI with the bank, change your passwords, and report it on 1930 or cybercrime.gov.in at once.
Where do I report income tax phishing emails?
Forward them to webmanager@incometax.gov.in.
Does the income tax department demand payment over the phone?
No. Demands come as written notices with a DIN, and tax is paid only through official challans.
Position as of 27 October 2026. Portal menus are as they stand on the e-filing and GST portals and can change. When in doubt, check before you click or pay.
