Information Security Consultation Desk: Q3 2026 Report
Overview
The Information-technology Promotion Agency (IPA), an incorporated administrative agency, compiled consultations received from individuals between July and September 2026. It handled 3,369 consultations, down about 12.1% from the previous quarter and up about 19.3% from the same quarter a year earlier. The most common tactic was a fake virus detection warning. The report also describes a phishing case impersonating the National Tax Agency and how to respond.
Key points
- The desk handled 3,369 consultations, down about 12.1% from the previous quarter and up about 19.3% from the same quarter a year earlier.
- The most common tactic was a fake virus detection warning, with 1,160 consultations.
- The case study explains how to respond to a phishing email impersonating the National Tax Agency.
Overview
The Security Center of the Information-technology Promotion Agency (IPA) introduced statistics on consultations received by its Information Security Consultation Desk from individuals between July 1 and September 30, 2026. Since April 2025, consultations from companies and organizations have been handled by the newly established Cybersecurity Consultation Desk.
The desk handled 3,369 consultations during the period, a decrease of about 12.1% from the previous quarter. Compared with the same quarter a year earlier, the total increased by about 19.3%.
Impact
The report explains that no harm will result if users have not entered personal information on a phishing site or installed an app. However, installing a malicious app may lead to remote control of the device, unauthorized transfers, information theft, or SMS messages being sent without the user's consent.
Details
Among the main tactics, fake warnings claiming to detect a virus were the most common, followed by unauthorized logins, phishing, one-click billing, and spam emails demanding cryptocurrency. Many unauthorized login consultations involved users who could no longer log in to Facebook or Instagram. Phishing reports included cases in which people entered personal or card information on fake websites.
One case involved a refund email claiming to be from the National Tax Agency. The response said it appeared to be phishing and cited a warning that the National Tax Agency and other agencies do not use email or SMS to request national tax payments or notify recipients of seizure. Reports of emails directing users to install malicious apps for Android began in September 2026. As of October 1, 2026, no official e-Tax app was available. The guidance advised deleting the email, avoiding its links and attachments, not installing unfamiliar apps, and not entering authentication credentials.