Security warning

  • A warning from the Tax Agency on some of the possible types of attempted online and technological fraud:

    Online: fake websites and phishing

    Some scams take the form of mass mailings of emails offering tax rebates, which may appear to be from the Spanish Tax Agency (AEAT) or its executives, using AEAT logos. These scams often refer to some information which must be provided to get the tax rebate.

    These fraudulent emails, known as “phishing”, refer to a non-existent tax rebate which is owed to the email recipient. In order to receive the money, the recipient has to go to a website where they are asked to give their bank account and credit card details.

    The aim of the criminals is to steal the victim's personal or bank details, either by referring them to a fake website that impersonates that of the Tax Agency or by making them download files with viruses.

    Do not answer these messages, they are an attempt to commit fraud by impersonating the Tax Agency.

    This is not the first time that this type of mail or SMS has been used, which is why raising awareness and informing citizens is essential. We recommend:

    • Not opening messages from unknown or unsolicited users - just delete them.
    • Not answering these messages under any circumstances.
    • Being careful when clicking on links in emails, even if they are from people you know.
    • Being careful when downloading email attachments, even from people you know.

    Remember, the best way to combat phishing is not to respond to suspicious communications that include a request for bank details.

    The Tax Agency reminds you that:

    • We never request your confidential, financial or personal information, account numbers or card numbers by email, and we never send attachments with invoice information or any other data.
    • We never pay rebates via credit cards or debit cards.
    • We never charge for the services we provide. Users only have to pay part of the cost of calls to 901 telephone numbers.

    See examples of phishing emails impersonating the Tax Agency

    The Tax Agency is the owner of the website comprising the Portal (domain name: “www.agenciatributaria.es”) and the e-Office (domain names: “www.agenciatributaria.gob.es”, "www1.agenciatributaria.gob.es", "www2.agenciatributaria.gob.es", "www3.agenciatributaria.gob.es", "www6.agenciatributaria.gob.es", "www8.ia.agenciatributaria.gob.es", "www9.agenciatributaria.gob.es", "www10.agenciatributaria.gob.es", "www12.agenciatributaria.gob.es", collectively referred to as the “AEAT website”).

    Always remember that any Tax Agency procedure involving a payment to you will take place on the AEAT website, under secure e-commerce conditions.

    Also, the Tax Agency expressly prohibits the use of frames or any other third-party mechanisms that alter the design, the original configuration or content of any of the domains described in this security notice.

    Text messages (SMS) not sent by the Tax Agency

    Phone customer services and information companies have been found sending text messages (SMS) to taxpayers who want to request or confirm a tax return certificate, in order to forward their calls to the Tax Agency and charge for this service according to their tariff.

    The Tax Agency reminds you that the numbers for their basic tax information helplines and other phone services appear on the website www.agenciatributaria.es and can also be accessed via the following link:

  • Basic Tax Information and other telephone services
  • Telephone appointment services not belonging to the Tax Agency

    It has been detected that certain telephone numbers offer to arrange appointments for drafting tax returns or modifying drafts in Tax Agency offices.

    The Tax Agency wants to clarify that it has no relation whatsoever with these phone numbers, and that in addition to charging users expensive fees, the appointments they make may not be valid.

  • Prior appointment services and other telephone services
  • You can make an appointment online free of charge at www.agenciatributaria.es

    Mobile apps

    Some Android app marketplaces have been found to offer apps using the image of the Tax Agency and offering services in its name.

    The Tax Agency wants to make clear that its official mobile apps are available free of charge, and can only be downloaded from the AppStore and Google Play.

    Do your part to avoid online scams

    These types of scams are often detected thanks to the collaboration of internet users who contact the information services of the Tax Agency which immediately takes the action required to follow them up.

    If you have any doubts as to the authenticity of any email, website, SMS text message, appointment services or similar claiming it came from or belongs to the Tax Agency, please call our IT department's Helpline (901 200 347/91 757 57 77/93 442 27 64) to check its authenticity.

    The Tax Agency would like to thank the public for reporting these activities.

    Please report any messages of this kind

    Advice for avoiding online scams

    Fraud attempts may take the form of mass emails impersonating the Tax Agency and using its logos.

    These emails usually offer a tax refund which does not actually exist. In order to receive the money, the recipient has to go to a website where they are asked to give their bank account and credit card details. Do not click on any links or attached files that come from a suspicious email.

    The Tax Agency will never request your confidential, financial or personal information, account numbers or card numbers by email, and we never send attachments with invoice information or any other data.

    Do not answer these messages, they are an attempt to commit fraud by impersonating the Tax Agency.

    This is not the first time that this type of mail or SMS has been used, which is why raising awareness and informing citizens is essential. We recommend:

    • Not opening messages from unknown or unsolicited users - just delete them.
    • Not answering these messages under any circumstances.
    • Being careful when clicking on links in emails, even if they are from people you know.
    • Being careful when downloading email attachments, even from people you know.

    For maximum security, always type the address of the Tax Agency website into the browser, rather than clicking on a link.

    And especially, before logging into the e-Office, check the site security certificate.