Russian Police Warn of New Tax Refund Scam Using Hacked Government Accounts

Russian authorities are sounding the alarm over a new cybercrime scheme targeting tax refunds via hacked government service accounts

Russian law enforcement has issued a warning about a sophisticated scam in which criminals hack into users’ accounts on the Gosuslugi public services portal to fraudulently claim tax refunds.

The Ministry of Internal Affairs reports that once inside the account, the attackers file applications for tax deductions on behalf of the rightful user, but redirect the funds to their own bank accounts. Personal data—including passport details, social security numbers, property records, and credit histories—are exploited, sometimes forming the basis for additional scams.

Unlike older schemes involving aggressive phone calls, the new method uses fake alerts about compromised accounts, delivered via SMS or messaging apps. The goal is to lure users into interacting with the fraudsters.

Authorities emphasize that the official Gosuslugi platform does not send alerts via text messages or third-party messengers. If a user suspects their account has been compromised, they should immediately change their password and never share verification codes.

Cybersecurity experts note that much of the responsibility lies with the users themselves. Publicly available personal photos can be used to generate deepfakes. Malware often enters devices through suspicious links sent via email or social platforms. Even joining unsecured Wi-Fi networks can open the door to phone hacks.