Austrian Taxpayers Hit by Fake FinanzOnline Scam via Urgent SMS Alerts

A sophisticated phishing scam is targeting Austrian taxpayers by impersonating the official FinanzOnline portal. Criminals are sending fake SMS alerts, warning users that their registration is about to expire. The messages urge immediate action to avoid penalties and direct victims to a convincing but fraudulent login page.

The scam begins with mass SMS messages claiming that FinanzOnline registration is expiring. Recipients are told to act quickly or face consequences. These texts include links to a fake portal designed to look identical to the real FinanzOnline site.

The fraudulent login form asks for far more details than the genuine service ever would. It demands personal information, full address details, and even online banking credentials. Once submitted, this data gives criminals full access to victims' financial accounts.

Authorities have warned that the Austrian Ministry of Finance never sends SMS messages with links. The fake site's domain also differs from the official one, finanzonline.bmf.gv.at. Despite these clues, the scam has grown more convincing over time, using urgency to pressure users into acting without thinking.

Since the campaign started in 2023, around 1,200 cases have been reported to police by early 2026. Most victims are in Vienna, Upper Austria, and Lower Austria. The scammers' tactics continue to evolve, making the fraud harder to spot.

Anyone who has entered details on the fake site should act immediately. Steps include contacting their bank, changing online banking passwords, and monitoring accounts for suspicious activity. Victims are also advised to file a police report and remain alert for further attempts. The scam remains active, with criminals refining their methods to deceive more users.