The State Tax Service of Ukraine has recorded new mass mailings of fake emails on behalf of the State Tax Service. These are emails from the addresses [email protected] and [email protected] , which are actively received by Ukrainians in November 2025.
Sending emails with similar domains allows scammers to disguise them as official tax notifications. The most common subject of the messages is “Urgent notification: tax reporting clarification based on audit results.” Opening such emails can infect your computer, phone, or tablet with a virus, allowing attackers to gain access to personal data, including banking applications and online banking.
The tax authority warns that malicious software often comes as attachments in zip, rar, scr or exe . Opening the files automatically launches a virus that can silently control the device and steal data.
The State Emergency Service gave safety recommendations:
-
Do not open suspicious attachments in emails.
-
Use antivirus programs on all devices.
-
Be careful even if the sender's address seems legitimate.
-
If possible, check the authenticity of the letter by checking with the sender that it was sent.
Fraudsters are especially active in late autumn, a period of active tax campaign. By November 19, individual entrepreneurs must pay the single tax and military levy, businesses must pay income tax for the third quarter of 2025, rent and other fees. And on November 20, the submission of VAT, excise and rent declarations for October ends, which creates a tense period for accountants and entrepreneurs.
