You receive an email notifying you of a refund of 219 euros from the tax authorities, or a text message mentioning a fuel aid of 108.72 euros. The message uses administrative vocabulary, displays an official logo, and urges you to click. This type of fraudulent campaign has become industrialized in recent years, and the site creances-publiques.fr is frequently mentioned in reports. Understanding how these scams work allows you to protect yourself effectively.
Public debts FR and phishing: the mechanism that scammers exploit
The site creances-publiques.fr is a portal managed by the GIE GPE, which groups judicial commissioners. It is used to settle public debts (fines, taxes, hospitalizations). The problem is that scammers replicate its appearance or use its name in fraudulent emails and texts.
The scenario is almost always the same. A message informs you of an unpaid debt or a pending refund. It contains a link to a page that looks like the official site. On this page, you are asked for your banking details or tax identifiers. The manufactured urgency is the main lever of the scam: “your file will be suspended”, “you only have a few days left”.
Before clicking on anything, it is useful to learn everything about the public debts scam to distinguish the real portal from fraudulent copies.
Check a domain and sender address: the simple rule of the DGFiP
The General Directorate of Public Finances has formalized a clear sorting criterion. All official tax emails come from an address ending in @dgfip.finances.gouv.fr. Any official site related to public finances uses a domain ending in .gouv.fr (impots.gouv.fr, amendes.gouv.fr).
If the message comes from a domain like “dgfip-remboursement.com” or “finances-publiques.net”, it is a copy. The same goes for texts: the tax administration never sends a clickable link to a payment form via text.
What to look for in a suspicious email
- The full sender address (not just the displayed name, which can be faked): it must end with @dgfip.finances.gouv.fr
- The URL of the link contained in the message (hover over it without clicking): it must point to a domain ending in .gouv.fr
- The presence of very specific amounts (219 euros, 108.72 euros) associated with a sense of urgency, which is a documented scam signal by the specialized press and the DGFiP
- Spelling or syntax errors in the body of the message, common in industrialized phishing campaigns
This check takes less than a minute. The sender domain is the first reliable filter to eliminate the majority of attempts.
Public debts scam: recent variants to know
Phishing campaigns related to public debts are no longer limited to classic emails. They now combine several channels: emails, texts, and social media, sometimes in the same sequence. A text announces a debt, a follow-up email comes with a link, and a fake help page appears on social media.
Among the recently documented scenarios, we find:
- The fake tax refund: an email promises a transfer after a “review of your tax situation,” with a credible amount to encourage clicking
- The fake unpaid fine via SMS: a short message redirects you to a site imitating amendes.gouv.fr
- The identity theft of the DGFiP towards companies, with fake transfer orders (FOVI scam)
These scams use exactly the administrative vocabulary: overpayment, review of the tax situation, exceptional aid. The tone is neutral, professional, designed not to raise suspicion.
Why online reviews are not enough to decide
On Trustpilot, creances-publiques.fr has an average rating. Some reviews confirm that it is an official site linked to judicial commissioners. Others denounce abusive practices or scams. The problem is that the reviews mix the real site and fraudulent copies.
A negative review may concern a phishing attempt received via SMS that impersonated the site’s name, not the site itself. Consulting reviews is a useful step, but it does not replace checking the domain and sender address.
Reacting after clicking on a suspicious link related to public debts
Have you already clicked and provided information? The first thing to do is to contact your bank to report the incident and, if necessary, block your card.
Then, immediately change your passwords if you entered tax identifiers. Your personal space on impots.gouv.fr uses a distinct password: change it without delay.
File a complaint online via the THESEE platform, set up by the Ministry of the Interior for internet scams. This report feeds investigations and helps close fake sites more quickly.
Also report the fraudulent email or SMS on the official DGFiP page dedicated to scams, or forward the suspicious message to the address indicated by the site impots.gouv.fr. Every report counts to slow down these campaigns.
The most protective reflex remains that of before the click: check the domain, never provide banking details from a link received via message, and access public services by typing the official address directly into the browser. A site in .gouv.fr typed by hand is always better than a link received unexpectedly.