Scam storm sweeps India: Fraudsters exploit I-T refunds, 8th Pay Commission buzz, FASTag alerts

scamm

• Scammers target public with fake tax, pay, and FASTag messages
• Fraudsters use fake links to steal bank and personal details
• Verify info only on official government portals to stay safe

Did our AI summary help?

A fresh wave of cyber fraud is spreading across the country, with scammers exploiting public interest around income tax refunds, the proposed 8th Pay Commission, and FASTag-related services to dupe citizens.

Over the past few weeks, many individuals have reported receiving SMS and emails claiming they are eligible for a pending income tax refund, a salary hike under the proposed 8th Pay Commission, or a FASTag recharge, activation, or refund. The messages typically carry links that resemble official government portals and urge recipients to click and update bank details, verify PAN information, or share OTPs.

Authorities have clarified that government departments do not seek confidential details such as OTPs, CVV numbers, or full banking passwords via SMS or email. Citizens are advised to verify any tax-related communication only through the official income tax e-filing portal and check FASTag status directly through authorised bank or NHAI platforms, and check updates regarding the 8th Pay Commission through the official portal, 8cpc.gov.in.

What is the income tax scam?

Fraudsters target taxpayers who are expecting refunds. Scammers send messages claiming that an individual’s income tax return is delayed, incomplete, or on hold. These messages often use alarming phrases such as ‘urgent action required,’ ‘refund pending,’ or ‘penalty if not verified,’ and include a link to resolve the issue.

When recipients click on the link, they are redirected to a fake website designed to closely resemble the official Income Tax e-filing portal. Victims are then prompted to enter sensitive details such as personal information, bank account numbers, PAN details, and even OTPs, allowing scammers to misuse the data for financial fraud.

What is the 8th Pay Commission scam?

According to e Indian Cyber Crime Coordination Centre (I4C), a unit under the Ministry of Home Affairs, cyber fraudsters are spreading messages, mainly on WhatsApp, urging government employees to download an APK file to check their so-called ‘revised salary.’

“Scammers are exploiting curiosity around the 8th Pay Commission by sending messages that promise a quick salary calculation. Once a person downloads the fake app, malware takes control of the phone, reads messages, captures OTPs and can even access linked bank accounts without the user realising it,” said Ekta Rai, Advocate, Delhi High Court.

What is FASTag annual pass scam?

The scam typically starts when users search online for FASTag annual pass services. Fraudulent websites, often promoted through paid advertisements and search engine optimisation, show up prominently in search results. When users click on these links, they are directed to sites that request details such as mobile numbers, vehicle registration information, and payment credentials.

Although the payment gateway appears genuine, the funds are not routed to any authorised agency. Instead, the money is diverted to accounts operated by fraudsters. After completing the transaction, victims either receive no confirmation or are sent fake receipts. In several instances, the fraudulent website vanishes altogether, leaving users with no way to track or recover their payment.

How to spot such scams

Look out for:

• Messages that create panic or urgency: ‘last chance’, ‘account will be blocked’, ‘refund will lapse today’.
• ⁠Links that look odd or unofficial, e.g., shortened links or domains that are not government sites. Check for grammatical mistakes and the language used.
• Sender IDs are random mobile numbers or strange email IDs, not official domains. Check for spellings in the domain.

“⁠You are asked to share OTPs, PINs, CVV, passwords, or to ‘update KYC’ through a link. No official action ever requires disclosure of sensitive information overa phone call or text,” said Aayushi Singh, Partner, Legum Solis.

How to remain protected

To mitigate risk, users should refrain from downloading any files, especially APK files, from unsolicited messages. Government agencies have explicitly stated that they do not distribute applications or calculators in this manner. The installation of such files has repeatedly been linked to malware capable of compromising device security and banking information.

All information concerning salary revisions, tax matters, and official schemes should be verified exclusively through authorised government websites.

For matters related to the 8th Pay Commission, the appropriate portal is 8cpc.gov.in, and users should rely solely on validated government domains ending with gov.in for such updates.

Similarly, any FASTag-related communication should be cross-checked with the official NHAI or authorised FASTag service providers, as fraudulent portals have been created to mislead users into sharing banking credentials.

It is essential to adopt robust digital hygiene practices. “This includes avoiding the sharing of OTPs, bank details, or other sensitive information with any unverified source. Users should also avoid interacting with unknown links or attachments, even when such messages appear to originate from credible or official-looking senders. Current advisories emphasise the sophistication of impersonation attempts, making independent verification a critical safeguard,” said Akash Lamba, Senior Associate, SKV Law Offices.

“⁠If you are a victim or receive a suspicious message, report it immediately on the National Cyber Crime Reporting Portal (www.cybercrime.gov.in) or call the cybercrime helpline 1930,” Singh said.