Sécurity dammage at the DGFIP : you must be extra vigilant !
In summary, remember three simple messages: The tax authorities never ask for usernames, passwords or bank details by email, SMS or telephone. A message containing accurate tax data does not constitute proof of authenticity; on the contrary, it may be an indication that it comes from a leak. Messages claiming to informe the recipient that they are affected by the incident must be treated with caution; official notification will come from rhe DGFIP itself.
-