Ukrainians have been warned about fake emails claiming to be from "Diia" regarding tax refunds. Stay vigilant and verify the source before responding.
In recent days, there have been reports of emails being circulated, allegedly sent by "Diia," regarding the possibility of receiving an annual tax refund.
This was reported by the State Tax Service of Ukraine.
The emails contain links to a phishing page that visually mimics the ID.GOV.UA portal.
On this page, scammers provide:
- information about the "annual tax refund";
- instructions for completing identification;
- a request to enter personal data: mobile phone number, full name, bank card details (number, expiration date, and CVV code).
The information obtained may be used to link an account to a new device and authorize access to a bank account, which allows for fund withdrawals.
Examples of web links to phishing pages:
- hxxps://diia-gov[.]com/sign/account/one-time/index.php?ID=c881dd31c6714f7b7bfd5954a1e47848
- hxxps://diia-gov[.]com/sign/account/one-time/loadingReview.php?ID=c881dd31c6714f7b7bfd5954a1e47848
- hxxps://diia-gov[.]com/sign/account/one-time/review.php?ID=c881dd31c6714f7b7bfd5954a1e47848
- hxxps://diia-gov[.]com/sign/account/one-time/reviewdata.php?ID=c881dd31c6714f7b7bfd5954a1e47848
Tax officials urged Ukrainians to maintain personal cyber hygiene; to be cautious and vigilant when opening attachments, even if they come from known senders, and to avoid opening received attachments without prior confirmation from the sender.
Background. Earlier, Mind reported that the "Diia" portal had restored the service for the automatic closure of individual entrepreneurs (IEs).