Beware: The new email scam impersonating the government

Argentina's Customs Revenue and Control Agency (ARCA) has issued an urgent alert regarding a massive phishing campaign. Fraudulent emails, pretending to be official communications, are being sent to steal taxpayer data.

A sophisticated online scam campaign is targeting thousands of taxpayers in Argentina, using the name of the Customs Collection and Control Agency (ARCA), the agency that replaced the AFIP (Federal Administration of Public Prosecutors). Cybercriminals send fake emails designed to appear as official notifications, aiming to trick victims into handing over their personal and financial information.

The tax authority has received multiple reports and has warned the public that this is a scam. It is essential that citizens learn to identify these fraudulent communications to avoid falling into the trap.

Scammers have devised a very convincing method that exploits taxpayers' fear of running into trouble with the tax authorities. The scam follows these steps:

• Fake email: The victim receives an email that appears to be from ARCA (Argentine National Autonomous University of Granada) or AFIP (Federal Administration of Public Administration). The message typically reports a supposed "tax debt" or a "pending audit."
• The deceptive sender: Criminals use email addresses that mimic official ones, such as [email protected] or similar. They often mention nonexistent departments, such as "AFIP Revisiones Pendientes 960" (Pending Revisions 960) to give the impression of legitimacy.
• The malicious link: The body of the email contains a link or button inviting the user to "check their situation," "check their file," or "pay the debt."
• The cloned website: Upon clicking, the victim is redirected to a website that is a near-identical copy of the official ARCA website.
• Data theft: On this fake page, users are asked to enter their personal information, such as their CUIT/CUIL (Tax ID number) and, most dangerously, their tax identification number. In some cases, they are even asked to enter their credit card information to settle the "debt."

"The former AFIP (ARCA) never uses email to request payments, personal information, or to report legal issues. Nor does it contact us through other means such as WhatsApp, social media, or telephone," the agency emphasized in an official statement.

Although the emails may seem very real, there are always telltale signs of fraud. Pay attention to the following details:

• Communication channel: ARCA NEVER notifies debts or requests sensitive data by email. The only official means for formal communications is the Electronic Tax Address, which can only be accessed from the official website (www.arca.gob.ar) with your CUIT (Tax Identification Number) and Tax Code.
• The generic greeting: Many phishing emails use impersonal greetings like “Dear Taxpayer” or “Dear Customer,” instead of your full name.
• Sense of urgency: Fraudulent messages often create a sense of panic, with phrases like “Immediate action required” or threats of fines and seizures if you don’t act quickly.
• Check the link WITHOUT clicking: Hover your mouse over the link (without clicking it). The real URL will appear at the bottom of your browser or email client. If it's not arca.gob.ar, it's a scam.
• Spelling or grammar mistakes: Although scammers are becoming more careful, small errors in writing can often be found.

The authorities' recommendation is clear and forceful:

• Do not click on any links.
• Do not download or open attachments.
• Don't reply to the message.
• Forward suspicious emails to ARCA's official reporting address: [email protected]. This helps the agency track and combat these campaigns.
• Delete the email from your inbox and trash.

This type of scam is not unique to Argentina. Similar tactics are used around the world, impersonating tax agencies and other government entities. The key to protecting yourself is always the same: be wary of unsolicited communications and verify everything through official channels.