Argentina's Tax Authority Issues Alert on Phishing Scam Using Fake Official Emails
Argentina's tax authority ARCA has issued a warning about a phishing scam impersonating the agency through fraudulent emails. Scammers send messages claiming to notify recipients of tax debts, audits, or fiscal irregularities, then attempt to trick them into clicking malicious links or revealing personal information. ARCA emphasizes that the legitimate agency never requests payments, credentials, or sensitive data via email.
How the Scam Works
This phishing scheme uses fraudulent emails that appear to come from ARCA, Argentina's tax authority. These messages typically contain:
- Notifications of alleged unpaid taxes or fiscal debts
- Claims of tax audits or inspections
- Warnings about problems with the recipient's tax status
Scammers exploit recipients' concerns about tax compliance by urging them to click embedded links or reply with personal information.
How to Identify Fraudulent ARCA Emails
ARCA has clarified how legitimate communications differ from scams:
What ARCA Never Does:
- Request payments, personal data, or passwords via email
- Demand immediate debt payment or notify of legal proceedings through email
- Ask for passwords or sensitive information through WhatsApp, social media, or phone calls
Official Communication Method:
- The only legitimate channel is the Electronic Tax Mailbox (Domicilio Fiscal Electrónico)
- Access requires your CUIT/CUIL and Tax Password on the official ARCA website
- Legitimate ARCA emails may only notify you that a new message is available—you must check the details within the official mailbox
Red Flags:
- Sender's email address appears suspicious or incorrect
- Message uses urgent language demanding immediate payment
- Contains suspicious attachments or links
- References AFIP (the former tax agency dissolved in 2024) rather than ARCA
Prevention and Response
If You Receive a Suspicious Email:
- Do not reply
- Do not click links
- Do not download attachments
- Access your tax information directly from the official ARCA website
Security Best Practices:
- Never share your Tax Password
- Use strong passwords and change them regularly
- Avoid connecting to public WiFi networks
- Disable unnecessary features like Bluetooth and NFC
Reporting
If you receive a suspected phishing email, forward the complete message to phishing@arca.gob.ar to report it to authorities.
Source: Diario El Sol Mendoza