Public explainers
When the leaked file is a government one
A message that sounds like the tax office, the identity-document service or the police is easier to believe. That is why those files are valuable to scammers.
Why official files are worth more
France runs services that already know a lot about you: tax, identity documents, driving licences, school administration, law-enforcement files. When those systems are reached without authorisation, criminals do not only get data. They get a costume.
“We are calling from the tax office” is a weak line until the caller can mention a plausible income figure, a withholding rate, a property address or a pending title application. Then it is a strong line.
Identity documents and account files
Portals for identity documents and driving licences hold the kind of civil-status data a phishing kit needs: names, dates of birth, email addresses, sometimes postal addresses and phone numbers. Even when supporting documents and biometrics are not in the leak, the remaining fields are enough to send a convincing “your card is ready, pay the fee here” message.
Open ANTS, taxes and identity services by typing the official address or using the official app. A link in an SMS is not the service.
Tax and bank-account files
Tax data such as income, household details, withholding rates and property references, together with bank-account directories (who holds which IBAN, and where they live), are a kit for fraud aimed at people with money on the line. The scam can look like a regularisation, a refund, a control, or a problem with a mandate.
The tax office will not ask you to buy vouchers, install software, or read codes from your espace impôt over the phone.
Law-enforcement files are different, and still a lure
Police files are not a consumer mailing list. When they are reached, the public risk is both the sensitivity of the records and the wave of copycat messages that follow the news. A message that claims to be from the police, or “about your file”, after a widely reported incident is a common follow-on scam.
Do not treat a headline figure as a personal notification. If an authority needs to contact you, use the channel you opened. On this site, disputed mass-theft claims stay labelled as claims. They are never treated as a confirmed count.
Check what these guides taught you. Take the quiz