A sophisticated scam targeting French taxpayers has been uncovered, involving counterfeit letters that closely mimic official communications from the French tax administration (DGFiP). These letters include a watermark of the Republic, the DGFiP headquarters address at 139 rue de Bercy, and references to the general tax code. They warn recipients of potential fines for not declaring digital asset accounts, such as cryptocurrency holdings, and direct them to register on a "Portal of Digital Assets" via a QR code within five days, under threat of sanctions. The website linked to the QR code, conformitecan.com, was registered on August 29, 2026—two days before the date printed on the letter. This inconsistency was spotted by Synaris, a French platform dedicated to identifying scams. While the scam references real regulations, such as the European directive DAC8, which requires platforms handling crypto assets to report certain transactions, the directive does not impose direct obligations on individuals. The "Portal of Digital Assets" does not exist at the DGFiP, and the tax administration never uses QR codes to initiate procedures. The scam is particularly effective because it includes accurate details, such as the fine of 750 euros per unreported digital asset account, which increases to 1,500 euros if the account exceeds 50,000 euros, as outlined in Article 1736 of the general tax code. The forms cited in the letter also exist, which can mislead taxpayers who check these details but overlook the real trap—the non-existent portal. The letters are more credible than emails and bypass spam filters, making them more convincing to recipients. The source of the names and addresses on the letters remains unclear, though two possibilities have been suggested: data from a DGFiP breach in August 2026 or leaks from the cryptocurrency sector. French data has become more widely circulated in recent years, increasing the credibility of these official-looking letters. The scam appears to be a copy of a similar campaign detected in the United States, where the American tax office warned about a fictitious "Digital Asset Compliance Portal." In that case, scammers used online forms to identify victims before making phone calls from fake advisors asking for personal information. If recipients received the letter, they are advised not to scan the QR code or call any numbers provided. They should keep the letter, report the website address at cybermalveillance.gouv.fr, and verify their situation by visiting impots.gouv.fr directly in their browser. Authorities emphasize the importance of verifying the legitimacy of any communication before taking action.