Do you have to pay IRS? “Attention to the deadline”, warns Finance

Othe taxpayers have until the end of this month, until 31 august, to pay the Income Tax for Singular Persons (IRS) for 2025, reminded the Ministry of Finance on Monday. 

“If your IRS statement on incomes of 2025 resulted in tax payable, the deadline for making the payment expires on 31 august 2026. See your situation at the Finance Portal and take into account the deadline“, can be read in a publication shared by Finance on social networks. 

Don't forget: If you have received a bill to be notified to pay IRS, know that you can do so at benefits. In the June newsletter, the Tax and Customs Authority (AT) explains everything you should know.  

“On the Finance Portal you can request payment in instalments of an IRS bill. The application must be submitted no later than 15 days after the deadline for voluntary payment”, can be read in the tax document. 

The AT explains that requests are made at: Citizens > Services > Benefit Plans > Simular/Register.

Warning: “Debts can be paid up to 36 monthly instalments and the value of each benefit may not be less than one quarter of the unit of account (25,50 €)“. 

Tax alert for fraudulent phone calls on IRS

The tax administration warns that citizens are receiving fraudulent phone calls on behalf of the tax authorities, in which they are asked to correct a supposed divergence in the IRS declaration.

Calls are part of a ‘vishing’ campaign, in which “recipients of these calls are asked to press a particular key to allegedly “correct a divergence in the income statement,” explains the Tax and Customs Authority (AT) in a message published this week on the Finance Portal.

Phone contacts take place at a time when the deadline for the delivery of income declarations for 2025 has already expired and at a time when the tax authorities have already had to settle the files (to complete the process of calculating the tax and notifying taxpayers of the final result, whether it results in a refund, money to be delivered to the State, or nothing to receive or pay).

The so-called “must be ignored”, recommends the tax.

In the same notice, AT notes that fraudulent ‘e-mails’ are circulating where attackers ask recipients to click on certain links and text messages by mobile phone (SMS) in order to induce people to validate personal data.

Vishing is a kind of attack in which social engineering techniques are used, using voice messages or phone calls, with the aim of capturing sensitive information from a victim, explains the National Cybersecurity Center (CNCS). The term results from the combination of English words ‘voice’ and ‘phishing’.

In this case, by simulating an institution to gain credibility, the attackers fraudulently invoke the name of the Tax and Customs Authority.

According to the report the “Cibersecurity in Portugal”, published by CNCS in April this year, “with the sustained increase in digital exposure of individuals and families to the internet and certain digital services increases the risk of cyberattacks”, with cases of social engineering and fraud, especially in the case of social engineering, to “the increase of vishing and CEO Fraud”.

In 2024, “the most frequently observed subtypes of social engineering were ‘vishing’ (18.31% of the total), CEO Fraud (17.89%), following the false recruitment techniques (11.6% of the total) and scams ‘Hello, Father... Hello, Mother’ (8.7%)’, says the CNCS in another September 2025 report of ‘Riscos & Conflicts’.