Skat’s name and logo are being used in a professional phishing con that includes fake emails seemingly sent from the tax authority.
Numerous citizens and businesses have received the fake email that poses as an official message from Skat and encourages the receiver to divulge sensitive personal details in order to collect reimbursement fees.
According to a press release by the tax authorities, there have been observed three different subject titles in the phishing campaign. (In Danish)
1) Kære Skat kunde,
2) Du er berettiget til at modtage en tilbagebetaling af skat af 375,00 DKK
3) Tilbagebetaling af skat pa 647,21 kr. pr.
Recipients of the fake emails are asked to fill out a form using their credit card information, so they can get money back in back-taxes.
Skat encourage anyone who has received the emails to immediately delete it and not to click on the link to the form.
Skat also said in a press release that they automatically pay back-taxes into citizen's NemKonto and would never send an email linking to a payment form. They also indicated that they were not aware of anyone being conned by the fake email.
You can read more about the phishing campaign at security group CSIS’s website. The phishing campaign comes just two weeks after a report from Microsoft's security research team which declared that the difficulty of the Danish language is a major deterrent to cyber criminals.