Tax Scams: How Cybercriminals Deceive Taxpayers
Scammers have found fertile ground in social media, fake websites, emails, and WhatsApp messages to deceive taxpayers by posing as the Tax Administration Service (SAT). Through these channels, they aim to get individuals to click on links that can compromise their personal information and facilitate the theft of thousands of pesos. Reports made to the SAT, the Taxpayer Defense Attorney's Office (Prodecon), and experts in the field vary in severity: from suspicious emails to identity theft to create phantom companies. Among the most common methods, WhatsApp messages have taken center stage; in fact, last June, Prodecon reported that many taxpayers received messages supposedly informing them of tax debts, urging them to click on a link within 48 hours to find out more.
Identity theft is one of the most concerning forms of fraud. Luis Pérez de Acha, an expert in the area, explains that many people have fallen for phishing traps through emails and WhatsApp, allowing scammers to gain access to sensitive information, including bank accounts. Remote interaction with the tax authority ramped up in 2007, when the SAT began operating transactionally, which forced taxpayers to provide their tax information. Pedro Canabal, also an expert in the field, mentions that the more the SAT communicates through these channels, the greater the imitation by criminals becomes, creating an atmosphere of uncertainty for taxpayers. From January to September of this year, the SAT sent out nearly 63.139 million messages, a considerable figure when compared to 28 million in 2014. In addition to phishing, there exists a black market for personal information, which allows criminals to take control of others’ financial lives.
Breach of trust also plays a significant role in these frauds. For instance, there are cases of employees who, when providing their INE (National Electoral ID) for a job, find their data used to open fraudulent tax profiles. The SAT has identified 50 individuals who were victims of identity theft in the past five years. Most of these cases are due to the incorrect transmission of the e.signature, similar to handing over a blank signed sheet. Michel Jiménez anticipates that these scams will increase with the growing digitization of processes, making it more urgent for the SAT to modernize its security systems without hindering taxpayers' obligations to fulfill their tax responsibilities. Pérez de Acha suggests that the SAT should limit its communication to only through the Tax Mailbox, as the use of WhatsApp and emails is not legally contemplated.
Given this situation, it’s more crucial than ever for taxpayers to stay alert to the constant evolution of digital scams. Protecting our personal information and being skeptical of suspicious messages are preventive measures that can help us avoid falling for these tricks. Responsible management of our data and the insistence on using official channels are key steps to safeguarding our finances in an increasingly digital environment.