German tax authorities warn of phishing emails regarding fake audits

Tax advisor Roland Franz has issued a warning regarding a surge in phishing emails targeting taxpayers. The fraudulent messages impersonate the Federal Central Tax Office, claiming to announce an external audit pursuant to Section 193 of the Tax Code.

The emails often use sender addresses that appear official, such as those ending in @bzst.bund.de or @bzst.de-mail.de. While the messages claim to include a PDF attachment, they actually contain an HTML file. Upon opening the file, users are prompted to enter a password, which is a tactic used to steal personal data.

Some scams also claim that administrative fine proceedings are pending due to undisclosed sales figures and request confirmation of IBAN details for SEPA direct debit mandates. Authorities emphasize that the tax administration will never request passwords or payments via email. Recipients are urged to delete such emails immediately and avoid providing any personal information.