Cryptocurrency tax compliance and phishing threats

Authorities and experts have raised concerns regarding cryptocurrency tax compliance and sophisticated phishing campaigns targeting digital asset holders.

In Germany, tax experts have warned that the pseudonymity of blockchain transactions does not guarantee anonymity, as wallet addresses and exchange registrations can be linked to individuals, potentially leading to tax evasion charges. Simultaneously, the US Internal Revenue Service (IRS) identified a phishing campaign using physical mail and QR codes to direct investors to a fraudulent ‘Digital Asset Compliance Portal’. This bogus domain was linked to registration in Hong Kong and servers in Romania.

Subsequent investigations by security teams revealed that these scams aim to collect data on user exchanges and holdings to facilitate ‘vishing’ (voice phishing). By obtaining personal details, scammers can impersonate customer service representatives to solicit passwords, two-factor authentication codes, or seed phrases. These tactics appear to leverage data from recent breaches involving hardware wallet providers.