Declaration Times: How to Protect Yourself Against Cyberattacks and Phishing

April 7, 2025

Tax filing season is upon us – a crucial time of year for individuals, organizations and, unfortunately, cybercriminals who take advantage of this period to launch targeted attacks against people filing or handling tax-related matters, making them easy targets for the theft of sensitive information.

Increased phishing attacks during tax declaration periods

During tax holidays, phishing attempts increase significantly, posing significant challenges for individuals and businesses. As cybercriminals exploit these times to target vulnerable users, it is important to stay up-to-date and informed about the latest trends and methods they are using.

Fake authority domains and international examples

Since February, researchers at Checkpoint Research (CPR) has tracked down a dozen registered domains related to the UK’s tax authority (HMRC) and a full 46 percent of these are classified as malicious or suspicious. Cybercriminals are using fake URLs that mimic legitimate domain names used by government agencies. Similar phishing campaigns have also been detected in the US, where criminals are posing as the US Internal Revenue Service (IRS) to steal users’ information. The Swedish Tax Agency also announced in March that they had been subjected to distributed denial of service (DDOS) attacks on the day it became possible to declare digitally.

Security expert's advice during declaration times

– It is important to be vigilant now during declaration times, says Mats Ekdahl, security expert at Check Point SoftwareCybercriminals are constantly looking for opportunities to exploit vulnerabilities and trick people. But with good habits and the right cybersecurity solutions, like email protection, web filters, or AI-powered tools, you can protect yourself from these threats.