Germany warns of Elster tax portal phishing and AI-driven fraud

phishing tax fraud cybercrime social engineering identity theft

German authorities and consumer protection agencies are warning of a significant rise in sophisticated cybercrime and phishing attacks. A major wave of fraudulent emails is currently circulating, impersonating the Elster tax portal. These messages, often using the subject line ‘Ihr Steuerbescheid 2025 – Erstattung bestätigt’, promise tax refunds to lure victims into clicking links that steal sensitive banking and identity data. The scammers create psychological pressure by imposing a deadline of August 31 to force quick, unthinking actions.

The Saarland Ministry of Finance has issued specific warnings, noting that the official Elster service never requests online banking connections or sensitive information like PINs via email.

Broadly, the use of artificial intelligence is making social engineering attacks more convincing and professional. According to Allianz Trade, damages from social engineering scams rose by 60 percent in 2025. This includes highly costly ‘fake president’ fraud, where criminals impersonate executives to authorize large, unauthorized transfers. Experts advise citizens to ignore suspicious emails, avoid clicking links, and verify any financial claims through official websites or direct contact with relevant authorities.

Entities

Allianz Trade · Deutsche Kreditbank · Deutsche Rentenversicherung · ELSTER · Postbank · Saarland Ministry of Finance · Tax Office Fürstenfeldbruck · Verbraucherzentrale

Claims

What the coverage asserts, and how many sources carry each claim.

[○ 1 SOURCE] Fraudulent messages use the official ELSTER logo to appear authentic. borncity.com
[○ 1 SOURCE] The Fürstenfeldbruck tax office has issued an official warning regarding fraudulent emails impersonating the tax administration. borncity.com
[● 2 SOURCES] Phishing emails use the subject line 'Ihr Steuerbescheid 2025 – Erstattung bestätigt' to deceive users. t3n.de
[● 2 SOURCES] The phishing attempts create psychological pressure by setting short deadlines for verification. t3n.de · borncity.com
[○ 1 SOURCE] Cybercriminals are using phishing emails to steal sensitive data by promising tax refunds. t3n.de
[● 2 SOURCES] The scam involves a fake identity verification process to obtain bank and credit card details. t3n.de · borncity.com