Malicious and phishing e-mails, WhatsApp, sms, calls, apps and letters
You may receive malicious or phishing messages which appear to come from the Dutch tax office. These messages may come in the form of a regular letter, an e-mail, a WhatsApp or text message, via other apps or just in a phone call. The Dutch tax office never sends such messages about payments arrears.
The Dutch tax office will inform you about any payments owing in a normal postal letter.
I have received a message supposedly from the tax office about a late payment
If you have received a request from the Dutch tax office about a late or missing payment and you are unsure if it is genuine, contact the Dutch tax office (0800 - 0543 inside the Netherlands or +31 555 385 385 outside the Netherlands).
Verify the account number before making an actual payment
If you receive a letter or message asking you to make a payment to the Dutch tax office, it should always be a Dutch bank account. Please verify the account number before making any payment. The following account numbers belong to the Dutch tax office.
Legitimate Dutch tax office (Belastingdienst) bank accounts:
Do not make tax payments into an account number not listed above!
What is a safe way to make payments to the Dutch tax office?
We strongly recommend that you always check carefully if the account number you're requested to pay into is in the above list. If so, it is safe to pay! Even if the payment turns out to be incorrect you can expect the Dutch tax office to refund it. The tax office usually requests payments into account NL86INGB0002445588. Any requested payments into this account, or any other in the list, are legitimate.
I have just paid into an account not belonging to the Dutch tax office
If you have just paid into a bank account not belonging to the Dutch tax office, contact your bank right away. In certain situations, your bank may be able to block the transfer.
What is phishing?
Phishing is a cybercrime in which a target or targets are contacted by email, telephone or text message by someone posing as a legitimate institution to lure individuals into providing sensitive data such as personally identifiable information, banking and credit card details, and passwords. The information is then used to access important accounts and can result in identity theft and financial loss.
Typically, malicious messages may contain one or more of the following characteristics:
- Poorly-worded Dutch (tax office letters are almost exclusively in Dutch. Any other language is suspicious)
- Typically, you are about to receive a surprise refund or payment request
- The sender's e-mail address is not within the domain 'belastingdienst.nl'
- Your are asked to follow a link or download an attachment (Do not do this!)