Fake 'PAN 2.0' Upgrade Emails Are A Scam. Here's What You Must Do If You Receive One

It looks official. It sounds urgent. But if you’ve received an email recently claiming you can download a new “PAN 2.0” card, know this: it's a scam. The Government has confirmed that such emails are part of a phishing attempt, and no such upgrade exists. The messages typically urge users to click on links to get their enhanced PAN card, complete with QR codes and a digital format. These are entirely fake and designed to steal your sensitive data.

This warning has been issued by both the Press Information Bureau and the Income Tax Department. If you’ve clicked or responded, you could have unknowingly compromised your personal information.

What These Emails Claim

Several people have reported receiving emails that suggest they are eligible to upgrade to a “PAN 2.0”, a supposedly improved version of their Permanent Account Number card with better security. The email often contains a download link that mimics Government websites.

Some of these messages are also styled to look like they’re from legitimate Government sources. But authorities have confirmed there is no such initiative. Clicking on any link may redirect users to fraudulent websites that harvest banking, PAN, and Aadhaar information.

What Authorities Are Saying

In a public advisory, the Press Information Bureau has called out these messages as phishing attempts. “Do not respond to emails, calls or SMS asking you to share financial or sensitive information,” it stated.

The Income Tax Department also clarified that they do not send unsolicited emails containing download links for e-PAN cards. Official communication is always routed through secure and verified portals only.

What You Should Do If You Receive One

Delete the email immediately. Do not click on any links, open attachments, or reply. If you've already engaged with the email, report the incident to webmanager@incometax.gov.in or incident@cert-in.org.in.

The best approach is caution. Verify anything that asks for personal details, avoid clicking unknown links, and report anything suspicious. You can also enable two-factor authentication for added protection.

technology