Beware of Fake Emails Claiming to Be From the Tax Office

REVIDATA Warns Companies About a Current Phishing Scam

Duesseldorf, July 2026 - Cybercriminals are constantly refining their scams. Currently, companies are receiving an increasing number of emails that appear to come from the tax office and announce an upcoming on-site or operational audit. In reality, these are professionally designed phishing messages aimed at tricking recipients into opening malicious attachments or links.

REVIDATA GmbH also recently received such an email. At first glance, the message appeared plausible and official. Upon closer inspection, however, typical red flags became apparent: The sender's real name had nothing to do with an official tax authority email address; the promised PDF attachment turned out to be an HTML file--a classic attempt to lure recipients to a malicious website; and an official email signature from the tax office was completely missing.

"Precisely because tax audits can be a routine part of everyday business operations, such messages appear particularly credible. This makes it all the more important to carefully examine any unexpected email before opening attachments or clicking on links," explains Brigitte Jordan, Managing Director of REVIDATA GmbH.

How Companies Can Recognize Phishing Emails

Companies should pay particular attention to the following characteristics:

* Carefully check the sender's address (real name)--not just the displayed name.
* Do not open any links or attachments as long as there are doubts about the email's authenticity.
* Be skeptical of file attachments, especially HTML files instead of the promised PDF documents.
* If in doubt, check directly with the relevant tax office or your tax advisor.
* Regularly raise employee awareness about phishing attacks.

Human vigilance remains the best protection

While modern security solutions filter out many fraudulent messages, professionally designed phishing emails still find their way into corporate inboxes time and again. That is why employee vigilance remains a crucial component of information security.

REVIDATA recommends that companies use phishing attacks as an opportunity to regularly review internal security processes and continuously raise employee awareness. Even a brief moment of attention can prevent cybercriminals from succeeding.

About REVIDATA

REVIDATA GmbH, headquartered in Duesseldorf, has been supporting companies for many years in the areas of data protection, IT auditing, software testing, information security, and compliance. Its goal is to help companies implement legal requirements in a practical manner and identify digital risks at an early stage.

REVIDATA GmbH
Postfach 10 42 27
40033 Duesseldorf
Germany

https://revidata.de

Frau Brigitte Jordan
+49 211 65584395
+49 211 65584396
datenschutz@revidata.de

REVIDATA GmbH, headquartered in Duesseldorf, has been providing auditing, consulting, and training services since 1981. REVIDATA (R) is a market-recognized, leading, and product-neutral provider of services in the areas of business auditing, IT auditing, internal auditing, data protection, data security, (mass) data analysis, compliance auditing, risk management, and the associated consulting, training, and continuing education. Independence, neutrality, and many years of practical experience in auditing and consulting form the foundation of REVIDATA GmbH. Just as important as these are the latest legal requirements that must be observed in each case.

This release was published on openPR.