A fraudulent letter impersonating France's tax authority, the DGFiP, is being sent to cryptocurrency holders in the country, according to details of the scheme now circulating. The document is styled as a formal tax notice, known in France as a "mise en demeure fiscale," and demands that recipients declare their crypto platforms, wallets and DeFi protocols.
Rather than directing recipients to an official government portal, the letter includes a QR code. Scanning it leads to a fraudulent website designed to harvest personal and financial information from victims who believe they are complying with a legitimate tax obligation.
A familiar format exploited
The scam relies on the credibility of the DGFiP's name and the format of a genuine administrative notice to pressure recipients into acting quickly. By framing the letter as a formal demand tied to tax compliance, the fraud plays on the anxiety many crypto holders already feel about correctly reporting digital assets to authorities.
The specific mention of platforms, wallets and DeFi protocols suggests the letter has been tailored to appear plausible to an audience already familiar with the reporting requirements that apply to cryptocurrency holdings in France, rather than being a generic phishing attempt aimed at the wider population.
Why the QR code matters
The use of a QR code, rather than a written web address, is notable. QR codes are harder for recipients to inspect before clicking, since the destination URL is not visible until after the code has been scanned. This makes it more difficult for a wary recipient to spot obvious signs of a fake domain before landing on the fraudulent page.
The approach mirrors a wider pattern seen across Europe, where scammers increasingly impersonate tax authorities, postal services and other trusted institutions to extract personal data or payment details, adapting the format to whichever population is deemed the most lucrative or vulnerable target at a given moment. In this case, cryptocurrency holders in France appear to be the specific focus.
No further details on the scale of distribution, the number of victims, or any response from the DGFiP have been made available at this stage.
