When it comes to cyber financial safety the golden rule is ‘ Do not share login ID Password or OTP with a any one. Digital financial and payment frauds in India saw a more than fivefold jump to 14.57 billions rupees ($175 million) in the year ended March 2024 from the previous period, according to the Reserve Bank of India’s annual report of 2024. Coupled with a lack of financial literacy and imprudent use of technology, the vast population is rendered vulnerable to such attacks.
In reference to that also income tax department also issued advisory directions related to tax filing scams and compromise assessee data. Hence the IT department suggests as a general precaution, please do not share your login credentials or other sensitive information.
If you think your e-Filing account may have been compromised or accessed in an unauthorized manner, then you may be a victim of cybercrime. Please report the incident to the concerned police or cyber-cell authorities as a first step. You may file an online criminal complaint/FIR by visiting https://cybercrime.gov.in Any information pertaining to the alleged cybercrime will be shared by the Income Tax Department with the relevant law enforcement authorities when so summoned under their statutory powers of investigation. Its an initiative of the Government of India to facilitate victims/complainants to report cybercrime complaints online.
As the income tax filing due dates are approaching, hiring Chartered Accountants (CA) Company Secretaries (CS) or Advocates to file your tax return often requires sharing your login credentials for the ITR filing portal.
It is common practice for tax firms to maintain a database of their clients’ login credentials, either on their own servers or elsewhere. However, we cannot blindly assume the level of security and protection against cyber data theft they provide for this sensitive information.
Alternative ways to file ITR with professional help It’s a common practice to share your IT portal login ID and password with your professional. Surprisingly, there’s no dedicated legal section in the taxpayer’s account for CAs or other specific professionals to be authorized to file returns.” So allowing them to download AIS, TIS, and Form 26AS, to submit your IT returns results in access that exposes sensitive information including bank account details, past tax returns and other financial details as provided by you. So if you don’t want to share personal details.
OPTION I
SHARE: AIS, TIS, Form 26AS in PDF and JSON/XML format with Professionals . Your professional will prepare ITR and share the first draft as PDF.Check ITR if changes are to be made. When you okay with the draft then confirm it , they will share ITR in JSON/XML format and then submit it yourself.
Challenges: Time-consuming professionals might charge extra for additional work.
OPTION II
Another solution is E- return intermediary (ERI) they have allotted with a license by the tax department allowing them to file tax returns without accessing the taxpayer’s login details.
- Who offers ERI services ? How to access ERI services?
The IT department website has a list of ERIs with contact numbers.
By implementing some mandatory authorisation the IT department can safeguard sensitive taxpayer financial and personal information and ensure greater accountability within the tax filing process.
*****
Adv. Ankit Pratap singh | Corporate law advisor, New Delhi | Write at – [email protected]