Fake eTax emails demand payment from Swiss taxpayers

Fake emails claiming to come from cantonal tax administrations are demanding payment from taxpayers in several Swiss cantons, SRF reports. The messages threaten debt enforcement, reminder fees or late-payment interest over alleged outstanding tax bills.

The emails are sent using the name eTax.ch. The cantonal tax administrations of Zug and Schwyz have warned about the phishing attempts. SRF inquiries indicate that at least all cantons in Central Switzerland are affected, including Lucerne, Uri, Obwalden and Nidwalden.

eTax is software used to file tax returns online. According to its provider, the application is used in 13 cantons, including Zurich and Aargau outside Central Switzerland. Fribourg and Neuchâtel use a download-based solution.

Marcel Ringler of developer Ringler Informatik AG said it was not yet possible to determine whether all cantons using eTax were affected. The company has reported the phishing campaign to the Federal Office for Cyber Security.

No evidence of stolen tax data

Ringler said a hacker attack could currently be ruled out. Based on the company’s inquiries so far, there were no indications that the systems of eTax.ch or Ringler Informatik had been compromised, or that tax data had been leaked.

It remains unclear where the attackers obtained the email addresses. Ringler said there were no confirmed findings, adding that email addresses could come from numerous sources, including publicly available directories.

How to protect yourself

Do not click links in suspicious emails. Access the tax portal only through the official website of the canton or its cantonal tax administration.

Do not provide personal information, login details, credit card information or bank details through links in emails. If you doubt the authenticity of a message or an outstanding tax bill, contact the responsible tax administration.

Anyone who has clicked a link and entered payment or login details should contact their bank immediately.