News
Help with your donation!
Even small amounts help us with our work, and we are especially happy about standing orders.
September 6, 2025 · Peter Bernscherer · Share on Facebook · Share on Twitter
Beware, fake text messages! Scammers are impersonating the Austrian tax office.
Today I received a phishing SMS (scam). Because the scam is so deceptively realistic, we want to show you step by step how the scammers operate – and how you can protect yourself.
A text message from an Austrian number
The insidious part is right from the start: The text message often comes from a completely ordinary Austrian mobile phone number. This lowers the inhibition threshold. The message urges you to click on a link – supposedly because your login details for FinanzOnline are about to expire.
Step 1: The perfect copy (The phishing link)
We opened the link for you in a secure test environment (sandbox). The result is alarming: The opened website looks deceptively similar to the real FinanzOnline platform. Logos, colors, and fonts were copied exactly.
The subtle difference: Anyone who looks closely will notice that some menu items and links leading to further information on the fake page don't work at all. They're just window dressing.
Step 2: The data collectors
This fake homepage prompts users to enter their name and personal information. Anyone who does so and clicks "Submit" falls directly into the next trap.
Step 3: Reaching for the bank account
After submitting the data, a message appears: "Verification via bank account is required." The victim is then shown a list of Austrian banks. Selecting their bank redirects them to a fake login page for the respective online banking platform. Anyone who enters their login details or even a TAN (transaction authentication number) here hands over complete control of their savings to the fraudsters.
How do I protect myself? Three golden rules:
The tax office does not send SMS messages: The official Austrian tax office never communicates about refunds or requests bank login information via SMS or email. Notifications are sent exclusively to your official FinanzOnline data box.
Check the URL (web address): The genuine address is always finanzonline.bmf.gv.at. Phishing sites often have cryptic endings or slightly modified names (e.g., finanzonline-at-service.com).
Never send bank details via link: No reputable institution requires bank verification via a link sent via SMS.
Do you suspect you've been scammed? Contact your bank immediately to have the account blocked and file a police report.