Multiple reports indicate that some people in Norway have been contacted by phone this year with demands to pay tax claims via the mobile payment app Vipps. Ragna Fossen, leader for security and preparedness at the Norwegian Tax Administration (Skatteetaten), emphasized that the agency will never call to ask for tax payments via Vipps. According to major media outlets, many have received emails from scammers impersonating Skatteetaten, some looking professional with logos and correct language, while Peter Burgos noted that AI is being used by attackers to make phishing emails appear more deceptive.
This wave of fraud attempts is reported annually when tax returns are sent out, with Skatteetaten beginning to distribute returns recently, though many have not received them yet. Skatteetaten has issued official warnings urging citizens never to pay via Vipps or click unsolicited links. Fossen stated that the agency warns against clicking links and never sends links to click for tax returns or settlements, adding that messages asking to click links for payments, refunds, or tax registration are scams.
no and log in there to check tax cards, returns, or settlements. The agency is aware of ongoing scams and regularly warns about them, noting that scammers are becoming more sophisticated. In Sweden, the Swedish Tax Agency (Skatteverket) has reinforced its security protocols, stating that fake emails or SMS that appear to be from the agency should not be clicked on, scanned, opened, or replied to.
Skatteverket emphasized it never requests bank account or credit card numbers via email or SMS, and only requests bank details through its e-services where users log in with e-identification. According to The Internet Foundation, tax returns and related communications are sent through digital mailboxes or regular mail, not via email or text for card details. Skatteverket will also introduce a service to notify individuals if someone tries to register at their address, a measure commissioned by the government after noted address frauds.
Scammers employ various techniques, including fake websites, QR codes, malware attachments, and BankID manipulation. Björn Appelgren explained that scammers may send attachments labeled as tax return notices or error reports that contain malware, and they use QR codes that lead to fake websites resembling Skatteverket's to steal card details. Appelgren added that phone scams often involve tricking people into misusing BankID to drain accounts.
According to Piteå-Tidningen, scammers described a typical message stating that a tax refund is approved and requiring verification of bank details and identity via a secure system, with fake tax refund emails circulating since December. Health data phishing has also emerged, with an email bearing the subject 'Pålegg: Komplettering av helseopplysninger' asking recipients to go to a personal portal to register current health status. The Norwegian Institute of Public Health (FHI) stated it does not know the sender and warns against using the service and entering private health data.
Your tax refund is approved. To complete the process and receive your tax refund, you need to verify your bank details and confirm your identity via our secure system.
FHI clarified it does not have a personal portal collecting residents' health information and will never ask for credit card or account numbers via SMS or email, advising that when receiving an email, recipients should check that the address actually comes from FHI, typically containing 'fhi' after the @ symbol. Phone scams involve protected numbers and impersonation tactics to extract bank details. Skatteverket warned that scammers may call from protected numbers pretending to be from the agency and ask for bank details, while Appelgren reiterated that such scams often trick people into misusing BankID.
Authorities are responding with awareness campaigns, employee training, and EU security initiatives. Skatteetaten is aware of ongoing scams and regularly warns about them, noting scammers are becoming more sophisticated. Skatteverket participates in the EU's annual information security month campaign called 'Tänk säkert', according to research sources, and trains employees on email signing and encryption for sensitive information.
Prevention tips include critical evaluation of messages, manual website entry, and sender verification. Skatteetaten provides tips to avoid being scammed, including critically evaluating emails/SMS, checking sender addresses, and not clicking links uncritically, and advises that when receiving messages from tax authorities, individuals must manually enter the address in the browser. Skatteverket, through The Internet Foundation, advises contacting the agency directly through official channels if uncertain about a message.
Reporting mechanisms include SMS forwarding, fraud reporting services, and proper authority channels. Skatteverket stated that suspicious SMS can be forwarded to 7726 to report spam, and the agency provides a service to report suspected tax fraud, including anonymously. Reports to Skatteverket should only be for tax-related matters; other issues should go to authorities like the police, with specific e-services available for reporting population registration errors.
The scale of identity theft is significant, with last year's statistics showing widespread exposure in Norway. According to NorSIS, last year, 170,000 Norwegians experienced identity theft, and 340,000 were exposed to attempted misuse. In Sweden, address fraud prevention is being enhanced with a new notification service for suspicious registrations.
As noted earlier, Skatteverket will introduce a service to notify if someone tries to register at someone else's address, commissioned by the government after noted address frauds. Fake invoices are another tactic, with scammers targeting businesses with fraudulent change requests. Skatteverket warned that fake letters with invoices requesting fees to change or deregister company information are scams.
Key unknowns persist, including how many people have fallen victim to these tax-related phishing scams in Norway and Sweden this year and what specific financial losses have been incurred by victims. It is also unclear if there are any ongoing investigations or arrests related to these phishing campaigns, and the effectiveness of current warning campaigns by tax authorities in preventing scams remains uncertain. Additionally, what technical measures are being implemented to block or trace these fraudulent messages has not been detailed by authorities.