News
Help with your donation!
Even small amounts help us with our work, and we are especially happy about standing orders.
07.06.2026 · Peter Bernscherer · Share on Facebook · Share on X (Twitter)
Beware, fake text messages! Scammers are impersonating the Austrian tax office.
Today I received a phishing SMS (scam). Because the scam is so deceptively realistic, we want to show you step by step how the scammers operate – and how you can protect yourself.
A text message from an Austrian number
The insidious part is right from the start: The text message often comes from a completely ordinary Austrian mobile phone number. This lowers the inhibition threshold. The message urges you to click on a link – supposedly because your login details for FinanzOnline are about to expire.
Step 1: The perfect copy (The phishing link)
We opened the link for you in a secure test environment (sandbox). The result is alarming: The opened website looks very different from the real platform. FinanzOnline They are virtually indistinguishable. Logos, colors, and fonts were copied exactly.
The subtle difference: Anyone who looks closely will notice that some menu items and links on the fake website don't work at all. They're just for show.
Step 2: The data collectors
This fake homepage prompts users to enter their name and personal information. Anyone who does so and clicks "Submit" falls directly into the next trap.
Step 3: Reaching for the bank account
After submitting the data, a message appears: "Verification via bank account is required." The victim is shown a list of Austrian banks. Selecting their bank redirects them to a fake login page for the respective online banking platform. Anyone who enters their login details or even a TAN (transaction authentication number) here hands over complete control of their savings to the fraudsters.
How do I protect myself? Three golden rules:
The tax office does not send text messages: The official Austrian tax office never communicates about refunds via SMS or email or requests bank login information. Notifications are sent exclusively to your official FinanzOnline data box.
Check the URL (Internet address): The real address is always finanzonline.bmf.gv.at. Phishing sites often have cryptic endings or slightly modified names (e.g., finanzonline-at-service.com).
Never share bank details via link: No reputable institution requires bank verification via a text message link.
Do you suspect you've been scammed? Contact your bank immediately to have the account blocked and file a police report.