Phishing emails allegedly from the State Tax Service: new wave of fake mailings has been recorded

Press service of the State Tax Service of Ukraine, published 01 May 2026 at 15:00 Chapter: News

Taxpayers receive a flood of emails purporting to come from the State Tax Service of Ukraine. The subject line of such emails mentions “discrepancies in reporting,” but in reality they have nothing to do with the Tax Service.

Such emails are sent from the third-party email addresses and contain malicious attachments or links. Opening them can infect a computer and give attackers hidden access to the users’ devices.

Emphasis: all official State Tax Service’s email addresses have the domain @tax.gov.ua and official mail is post@tax.gov.ua. If the letter comes from a different domain, this is a sign of forgery.

Attachments in .pdf, .zip, .rar formats, as well as files with .exe and .scr extensions, which may contain hidden remote access software, are particularly dangerous.

Taxpayers are urged to follow basic rules of cyber hygiene:

- do not open suspicious files,

- carefully check the sender’s address and do not trust even familiar contacts without additional confirmation.