Cyprus warns about fake emails promising tax refunds

On September 9, the Cyprus Tax Department warned citizens and companies about a new wave of fraudulent emails that promise tax refunds (including VAT) and ask recipients to scan a QR code to receive them. According to the department, the emails use a fake GOV.CY logo and are sent from a fraudulent address allegedly associated with the TAX FOR ALL (TFA) system.

According to the Tax Department, the purpose of the emails is to gain access to recipients’ bank details and personal information. Scammers ask users to click a link or scan a QR code, which can result in phishing of payment details and theft of funds.

The department reminds that all refunds are made exclusively via IBAN, which the taxpayer personally provides to the department, and that transfers are conducted through secure procedures — without links or QR codes. Genuine notifications are sent only from addresses with the domain @tax.mof.gov.cy.

The Tax Department advises ignoring suspicious emails, not scanning QR codes, and not sharing personal or banking information via email. In case of doubt, it is recommended to contact the Tax Department through official channels for verification.