What is the fake e-PAN email scam and how does it work?

The fake e-PAN scam involves cybercriminals sending phishing emails that appear to be from the Income Tax Department of India. These emails falsely claim that recipients need to download their e-PAN card as part of a new "PAN 2.0" upgrade. The emails often include a link that leads to a fraudulent website, where victims are tricked into entering sensitive information like passwords, credit card details, or bank account numbers.

Is the Income Tax Department actually sending emails for downloading e-PAN cards under PAN 2.0?

No, the Income Tax Department has not issued any such communication asking individuals to download e-PAN cards via email. According to a warning from PIB Fact Check, these emails are completely fake and intended to steal your personal or financial information. PAN 2.0 is a legitimate initiative that includes features like QR codes for added security, but existing PAN holders are not required to take any action unless notified through official channels.

What is phishing and why is it dangerous?

Phishing is a type of online fraud where scammers pretend to be trusted entities, like banks or government departments, to trick users into revealing personal information. These scams are especially dangerous because they often look authentic and may lead to identity theft, bank fraud, or financial loss. Phishing attacks are commonly executed via emails, SMS, or even phone calls, and can compromise the security of your digital and financial life.

How can I protect myself from phishing scams related to e-PAN and similar frauds?

To stay safe from phishing scams, never click on suspicious links or download attachments from unknown email senders. Avoid sharing any personal details like your PAN, passwords, bank account numbers, or OTPs. Always verify the sender’s email address and cross-check information through official websites or helplines. Using updated anti-virus and anti-malware protection on your devices also helps prevent phishing-related threats.

Where can I report fake e-PAN emails or phishing attempts?

If you receive a suspicious email related to e-PAN or any government service, you should report it immediately. Once reported, delete the email to prevent accidental interaction. Prompt reporting not only protects you but also helps authorities take action against the scammers.

Home

Schemes

Services

Community

About Us

Beware Of Fake Emails Promising e-PAN Card Downloads—Protect Yourself From Scams

Alankar Mishra

Author

Updated: 28-01-2025 at 7:37 AM

Beware Of Fake Emails Promising e-PAN Card Downloads—Protect Yourself From Scams

Have you received an email asking you to download your e-PAN card? Scammers are now targeting individuals by sending fake emails claiming to be from the Income Tax Department. Irrespective of the means used, these messages are intended to deceive users into providing private information or clicking on phishing URLs.

In this article, you’ll learn about how to recognise phishing emails and scams, the purpose of the government’s PAN 2.0 programme, and some measures to protect yourself.

Fake e-PAN Emails: What You Need to Know

The Press Information Bureau (PIB) Fact Check recently flagged a phishing scam involving fake emails about e-PAN card downloads. These emails appear to be from the Income Tax Department, claiming users need to download their e-PAN cards under the new PAN 2.0 initiative.

In a warning shared on X (formerly Twitter), PIB Fact Check stated:

“Have you also received an email asking you to download an e-PAN Card? PIBFactCheck: This is a fake email. Never reply to calls, texts, emails, or links requesting sensitive or financial information.”

Scammers use these emails to lure victims into revealing confidential details like passwords, bank account numbers, and credit card information.

What Is PAN 2.0?

PAN 2.0 has a sense of much more aesthetics and this was introduced by the Income Tax Department of India. These enhanced e-PAN cards come with a QR code to encode the card for better security against fraud abuse and robbery. However, current holders of the PAN card are not required to upgrade.

What Is Phishing?

Phishing is a cybercrime where fraudsters disguise themselves as trusted entities to steal sensitive information. According to the Income Tax website:

“Phishing is the process of attempting to acquire sensitive information such as usernames, passwords, and credit card details by masquerading as a trustworthy entity in an electronic communication.”

These scams often involve emails or messages directing users to fake websites designed to mimic legitimate ones, tricking them into entering their details.

How To Stay Safe from Phishing Scams

Phishing scams trick people into sharing personal or financial information through fake emails or messages. Staying cautious and following simple steps can help you avoid falling for these scams. Here’s how to stay safe from phishing:

Do Not Reply to Suspicious Emails: Ignore and delete emails claiming to be from the Income Tax Department requesting personal or financial information.
Avoid Clicking on Links: Never click on links or attachments in emails from unknown senders. They may contain malicious software or direct you to fake websites.
Do Not Share Sensitive Information: Legitimate organisations will never ask for PINs, passwords, or bank account details via email.
Use Security Tools: Install and regularly update anti-virus, anti-spyware software, and a firewall to protect your device from malicious software.
Verify the Sender: Always cross-check emails claiming to be from the Income Tax Department by contacting their official helpline or website.

How To Report Phishing Emails

If you receive an email that looks like a phishing attempt, it’s important to report it right away. Reporting helps authorities take action against scammers. Here’s how you can report phishing emails:

Forward the Email: Send the email or its URL to webmanager@incometax.gov.in and incident@cert-in.org.in.
Provide Internet Headers: Include the email’s header information to help locate the sender.
Delete the Email: After reporting, immediately delete the email from your inbox.

Conclusion

Scammers are taking advantage of the modernisation of e-PAN, to cheat people. In such respects it leads to a broader message, individuals can always be more informed and cautious, and they have certain responsibilities toward the society. Always check e-mail messages, and do not give away sensitive data via the Internet. For your safety, be sure to report any suspicious activity to the appropriate authorities.

Join the conversation and stay informed! Visit the Jaagruk Bharat community page here and be part of an active, engaged community.

Frequently Asked Questions