PIB Warns Against Fake e-PAN Card Emails. Income Tax Department Warns of Phishing Scam

If you've recently received an email prompting you to download your e-PAN card, do not click; it's a phishing attempt. The Press Information Bureau's (PIB) Fact Check Unit has issued a public advisory warning users about fraudulent emails that appear to offer access to an e-PAN card download link.

The PIB Fact Check flagged these emails as #Fake, sharing screenshots of the scam on social media to raise awareness. The emails, titled "Download e-PAN Card Online: A step-by-step guide", are being sent from unauthorised and suspicious email addresses. They typically contain malicious links meant to trick users into divulging sensitive personal and financial information.

📢Have you also received an email asking you to download e-PAN Card❓#PIBFactCheck

⚠️This Email is #Fake

✅Do not respond to any emails, links, calls & SMS asking you to share financial & sensitive information

➡️Details on reporting phishing E-mails: https://t.co/nMxyPtwN00 pic.twitter.com/6PD3FcPR52

— PIB Fact Check (@PIBFactCheck) July 6, 2025

In response to public concern, the Income Tax Department clarified that:

• It never asks for personal details like bank account numbers, passwords or PINs via email, SMS or phone.
• It does not send emails asking users to download their e-PAN from unknown sources.
• It does not link users to third-party websites to access PAN-related services.

These emails are part of a phishing campaign, a cybercrime tactic where scammers impersonate trusted organisations to steal confidential data such as credit card details, passwords, or other login credentials. Victims are often directed to fake websites that look strikingly similar to official government portals.

The IT Department and CERT-In Offer the Following Safety Tips

1. Do not respond to suspicious emails or calls.
2. Avoid clicking on links or downloading attachments from unknown sources.
3. Never provide financial or personal details via email.
4. Keep your anti-virus, anti-spyware, and firewall software up to date.
5. Report suspicious emails by forwarding them to:

• webmanager@incometax.gov.in
• incident@cert-in.org.in

Once reported, delete the email immediately to avoid potential risks.

As phishing attacks continue to grow more sophisticated, users are urged to stay vigilant and cross-check any communication claiming to be from government departments. When in doubt, verify through official websites or helpline numbers.