GST Refund Agent Scam
An agent or caller claims a large GST refund is pending and asks for a fee, login or OTP to release it. See how small businesses are cheated.
A small trader or exporter receives a call or email that a GST refund of lakhs is ready, or that an agent can obtain one. The price is a processing fee, a share of the amount or a login to the GST account. The refund is invented, and the access gives the scammer a way to file false returns or change the registered phone number, which leads to penalties for the real owner.
How the scam works
Scammers use public information such as business names and GST numbers listed on invoices or directories. They call with the correct trade name and say that a refund is stuck due to a 'mismatch' that only they can clear. Some pose as a department officer, others as a consultant with 'insider access', and they speak with the language of returns and credits.
The pressure is the sum and the clock. The refund is described as large and about to be cancelled if documents are not sent today. The caller asks for the portal login, a mobile OTP, the bank details and a fee for the 'file'. He may send a fake notice by email with a seal and a link to a lookalike portal, where the trader types the real login.
The payoff is the fee and access to the account. With the login the scammer can change the registered mobile number and email, file returns or claim credit in the trader's name, and sell the details. The owner may face notices and penalties for filings never made by him, and spends months and money in correcting the record.
An example of what you may see
Example email (invented): 'Subject: GST refund of Rs 4,82,000 on hold. Dear taxpayer, your refund is pending due to a bank mismatch. To release, log in at the link below and share the OTP with our officer, and pay a processing fee of Rs 8,500 within 24 hours. Failure will cancel the refund.' A phone call follows from a person who says he is calling from the refund cell and asks you to stay on the line.
This example is written for illustration. Real messages change their wording, names and links all the time.
Red flags
- A refund that requires a fee to a personal account.
- A request for your GST portal login or OTP.
- A notice with a link to a portal address you do not recognise.
- A promise of a large refund from an unknown caller.
- A deadline of hours to submit documents.
- An agent who wants his number or email set as the registered contact.
What to do right now
- Do not click the link or share a login or OTP.
- Check refund status on the official GST portal typed by hand with your own login.
- Ask your accountant or tax professional to verify any notice.
- Keep your registered mobile number and email under your own control.
- Report the number and email to the official helpdesk and Sanchar Saathi.
If you already paid or shared a code
- Change your portal password and check the registered mobile number and email.
- Call 1930 and report at cybercrime.gov.in if money was paid or lost.
- Tell your bank on the number printed on your card about any suspicious transfer.
- Inform your accountant and review filings made in your name.
National Cyber Crime Helpline: 1930. Report online at cybercrime.gov.in. Do it fast: the sooner your bank is told, the better the chance that money can be held.
Where this scam shows up
Read how it looks on each channel:
How Safeavio helps
Safeavio's link check can look at a refund link from an email or chat before you open it and warn about lookalike portal addresses, and the scam check on pasted text marks the fee, the OTP request and the deadline. It cannot log in to a tax portal or confirm a refund, so use the official GST portal and your accountant for that.
Check it before you tap or pay
Safeavio Sentinel is a made-in-India Android app: paste a message or link, or scan a QR code, and get a plain verdict with the reasons. It helps you spot a scam; it does not promise to stop every one.
Download for AndroidWhat the app does
Google Play listing: coming soon. Today the signed APK is on safeavio.com/download. Android 7.0 or later.
Questions people ask
Does the GST department ask for a fee to release a refund?
No fee is paid to a private person to release a genuine refund. Status is visible on the official portal when you log in yourself. A fee request from a caller or email is a warning sign.
How can I check an email about a refund?
Do not click its link. Type the official portal address yourself, log in and look for the notice there. If it is not there, treat the email as fake and show it to your accountant.
What if I shared my portal login?
Change the password at once, check and correct the registered mobile and email, and review recent filings. Report it to 1930 and the official helpdesk to protect your record. Also tell your bank if you shared bank details, and keep every email and call record for the report.