Tax refund phishing scams sweep France and Spain

Criminal groups are running phishing campaigns that impersonate public tax and social‑welfare bodies to steal personal and banking data. In France, messages appear to come from the tax authority (DGFiP), CAF, Ameli or URSSAF and claim a refund of up to €230, directing recipients to click a link and enter bank details. The scam follows the French fiscal calendar, peaking around tax filing periods and benefit disbursements.

In Spain, a similar scheme uses fake SMS alerts that appear to originate from the Agencia Estatal de Administración Tributaria (AEAT). The messages promise a tax refund, include a link that mimics the agency’s website, and ask for identification numbers and banking information. Victims are urged to verify any unexpected messages by accessing the official agency site directly, not through provided links, and to report suspicious communications. If personal or banking data have already been shared, experts recommend contacting banks immediately, monitoring accounts, and changing passwords.

Authorities in both countries stress the importance of checking URLs for official .gouv.fr or .gob.es domains, avoiding urgent‑call‑to‑action language, and never providing full bank details via SMS or email.