Portugal's Tax and Customs Authority (AT) has confirmed awareness of an ongoing malicious campaign. Some taxpayers are receiving fake messages that simulate official AT communications, both via email and SMS.
The goal of these messages is to deceive recipients into accessing fraudulent pages or making undue payments, claiming a supposed tax regularisation.
What do these messages look like?
The messages present themselves as legitimate AT communications. Emails ask you to click on provided links. Text messages urge you to make a payment to "regularise your tax situation."
Real examples of fraudulent emails
Below we show real screenshots of messages received by Portuguese taxpayers. Notice the warning signs: suspicious senders, fake domains and alarmist language.
@resolucaocidadaosempapel.blog - clearly fake
@rumolivre.blog
Fraudulent SMS example
How to identify fake messages
- Suspicious sender - AT only communicates via
@at.gov.ptdomains - External links - AT never sends direct payment links. The official portal is
portaldasfinancas.gov.pt - Artificial urgency - Phrases like "last day for payment" are typical phishing tactics
- Bank data requests - AT never asks for bank details by email
- Sending time - Messages sent at 2am are a strong fraud indicator
What you should do
- Do not click any link in the message
- Do not make any payment requested via unsolicited SMS or email
- Always access the Tax Portal directly via portaldasfinancas.gov.pt
- Report the message to the relevant authorities
- Contact your accountant if in doubt about your real tax situation
AT never requests urgent payments via SMS or email with external links. If in doubt about your tax situation, consult exclusively the Tax Portal or contact the taxpayer support service.
What to do if you already clicked
- Immediately change your Tax Portal password
- Contact your bank if you entered banking or credit card details
- File a complaint with the Judicial Police or Public Prosecutor
- Inform AT through official channels
Protect yourself and share this alert
These phishing campaigns are increasingly sophisticated. Share this article with family and friends - especially those less familiar with technology.
If you have doubts about any tax communication you've received, contact Grupo Your. Our team can help verify authenticity and protect your data.
