The Tax Service has warned of a large-scale phishing attack targeting Ukrainians

A massive phishing cyberattack has been detected in Ukraine, in which cybercriminals are sending citizens fake emails claiming they have tax debts. The scammers demand that recipients pay the debt immediately or verify the details, using the official logo of the State Tax Service of Ukraine (STS) to mislead them. 

This is reported in an official warning from the STU.

Hackers are trying to make the email campaign as convincing as possible: they completely copy the agency’s visual style, mask the senders’ email addresses under government domains, and intimidate recipients with fines. The tax service emphasizes that clicking on links in such emails is extremely dangerous, as it can lead to the automatic download of malicious software or the theft of confidential data, including email passwords and bank card details.

The agency urges citizens to remain vigilant and reminds them that the tax service never sends payment demands via third-party links in emails. You can safely check your actual tax status exclusively through two official sources—your personal Taxpayer’s Electronic Account or the “My Tax” mobile app. Suspicious emails should be deleted immediately without opening any attached files or links.

The National Bank of Ukraine warns of a new wave of phishing attacks in which scammers are impersonating official NBU letters. People are receiving messages with malicious attachments that look like genuine documents.

The NABU has warned of a mass mailing of phishing emails posing as official communications from the bureau.