Fake gov.br at tax season: the phishing that hijacks your fiscal identity
The clone sites that multiply during filing season and how a hijacked gov.br opens INSS, FGTS and e-CAC.
Audience: Professionals and Personal Brands · Risk level: CRITICAL
Blindfy Intelligence Unit · Technical review by Blindfy
Scenario
During income tax season, a professional receives a WhatsApp or email styled as the Federal Revenue Service warning of a "pending issue in your return". The link leads to a perfect gov.br clone. By entering CPF and password, he hands over the key to his entire fiscal identity.
How the scam works
Criminals register dozens of similar domains (gov-br.online, gov.br-receita.com etc.) and blast messages at scale. The sites are technically identical to the official gov.br. Once the credentials are captured, they gain access to INSS, FGTS, e-CAC, the digital driver's license and confidential taxpayer data.
Common mistake
Believing the browser padlock equals an official site. Any domain can have HTTPS — it only protects transmission, it doesn't prove authenticity.
Impact
Improper access to tax records, altered returns, payroll-deducted loans opened at INSS, undue FGTS withdrawals and companies opened in the victim's name. Recovering a compromised gov.br takes weeks and requires visiting a government office in person.
What works
Blindfy runs fast takedowns of fiscal phishing domains, monitors mentions of the person's name and CPF on networks and Telegram credential markets, and provides incident response to recover a compromised gov.br.
Protection checklist
- Access gov.br only by typing the domain directly in the browser
- Enable two-step verification via an authenticator app
- Save the official domain in your browser favorites
- Never click "tax pending issue" links received by message
- Monitor emails from senders imitating the Revenue Service
- Check your CPF report at Serasa periodically
- Report identified phishing to the official gov.br channel
Editorial sources
- CERT.br / NIC.br — Cartilha de Segurança para Internet
- ENCCLA / Ministério da Justiça — Enfrentamento a golpes digitais
gov.br has become the Brazilian citizen's master key. Hand it to a clone and you hand over your entire fiscal life.
