Income tax returns have been sent out to those who use a digital mailbox since Monday. But many have already received tax notices - from fraudsters.
"Your tax refund has been approved. To complete the process and receive your tax refund, you need to verify your bank details and confirm your identity via our secure system," reads a fraud attempt the Internet Foundation has received.
"Scam emails like this about refunds have been appearing since December," says Björn Appelgren.
Some emails prompt the recipient to scan a QR code.
It is a slightly newer variant that often leads to a site that looks exactly like the Swedish Tax Agency's. The site has a form where you have to fill in your payment card details, and with that information, fraudsters can hijack your card and use it.
Empty the account
It also happens that scammers call.
In telephone scams, it is common for them to try to get you to use your BankID incorrectly so that they can empty your accounts, says Appelgren.
Sometimes they try to install malware. This often happens via an email with an attached file that may say, for example, "declaration notification" or "declaration error report".
If you download the file, your device may be infected.
Then you infect your computer with some form of spyware that can run in the background and steal valuable information from you.
Do not open
The Internet Foundation's advice to avoid being scammed is to never click on links or scan QR codes in messages from senders claiming to be the Swedish Tax Agency. You should also not open or download attached files.
The Swedish Tax Agency will never contact you via email or text message in matters where you need to share payment card details. The tax return and any related communication will be sent via your digital mailbox or as physical mail.
Another tip is to contact the authority yourself if you feel unsure.
You can find a contact method yourself or log in via their e-service.
