PAN 2.0 Scam Alert: New Online Fraud Empties Bank Accounts — Here's How to Stay Safe

A new online scam known as the "PAN 2.0 Scam" is making headlines across India. The government has issued an urgent warning to citizens, cautioning them against this latest phishing attempt that targets users by luring them into downloading a fake version of their PAN card. Victims of this scam have reportedly lost access to their bank accounts, with cybercriminals stealing their financial and personal data through deceptive emails.

Let’s break down what this scam is all about, how it works, and — most importantly — how you can protect yourself from becoming a victim.

What is the PAN 2.0 Scam?

The PAN 2.0 Scam is a sophisticated phishing scheme in which fraudsters send out emails pretending to be from official sources. These emails come from addresses like info@smt.plusoasis.com and contain subject lines such as “Get your PAN 2.0 Card.” The message urges users to click on a link to download the new version of their PAN (Permanent Account Number) card — a crucial identity document in India used for financial and tax-related transactions.

These emails appear legitimate at first glance, often mimicking the design and tone of official government communication. Once a user clicks on the embedded link, they are redirected to a fraudulent website that looks like a government portal but is designed solely to steal sensitive information.

What Happens After You Click?

Once on the fake website, users are prompted to fill in personal details including:

• PAN number

• Aadhaar card number

• Bank account details

• Mobile number

• Other personal identification information

This data is then harvested by the scammers and can be used to carry out financial fraud, including unauthorized transactions, identity theft, and complete account takeovers.

Government's Response and Public Warnings

India’s Press Information Bureau (PIB) Fact Check Unit took to social media to issue a clear warning. They posted screenshots of the fraudulent emails and emphasized that the Income Tax Department never sends such emails requesting users to download PAN cards via unofficial links.

The Income Tax Department also clarified that all official PAN-related services are available only through government domains ending in .gov.in or .nic.in. If a link doesn’t match these domains, it is best to treat it as a potential scam.

How to Spot and Avoid the PAN 2.0 Scam

Here are some critical tips to protect yourself from falling victim:

Never click on suspicious links in emails or text messages.
If you receive an email about your PAN card that asks you to click a link, verify the sender’s address and cross-check it on the official government portal.

Avoid sharing personal details online unless absolutely necessary.
Only enter sensitive data on secure, verified websites. Look for HTTPS in the URL and ensure the site belongs to a trusted government entity.

Check official government sources.
Visit www.incometax.gov.in or other verified government portals to manage PAN services.

Enable two-factor authentication on your bank accounts and important financial apps.

Report suspicious activity.
If you suspect fraud or have received a suspicious email, report it to cybercrime.gov.in or use the helpline 1930.

Final Words

Scams like PAN 2.0 are a harsh reminder of the increasing sophistication of cybercrime in India. As digital services expand, so do the tactics used by scammers to exploit unsuspecting users. By staying alert, verifying links before clicking, and never sharing sensitive details through unverified sources, you can keep your financial information safe from cyber fraudsters.

Remember: If it sounds urgent, looks official, and asks for personal data — pause, verify, and think before you click.