Adjust Text Size
small medium big

IRS Tax Refund Phishing Scheme

Written by Nickel - 4 Comments
  •  Tip It!

Yesterday I received what is perhaps the most convincing phishing e-mail that I’ve ever seen. It was supposedly from ’support@irs.gov’ and it offered information on how to check on the status of your tax refund. It was relatively clean from a grammatical standpoint, and it offered several links for more information. Two of these led to actual IRS web pages, whereas the third led to a website out of Italy (or at least it was registered with a ‘.it’ top level domain) that looks just like an IRS web page, and had fields for entering your name, social security number, and credit card information.

Hello, identity theft! If only they had better timing — say, sometime during or shortly after tax season rather than the middle of December — they’d probably hook an awful lot of people. In case you’re curious, here’s what the message looked like (although it also had a graphical IRS header):

You filed your tax return and you’re expecting a refund. You have just one question and you want the answer now – Where’s My Refund?

Access this secure Web site to find out if the IRS received your return and whether your refund was processed and sent to you.

New program enhancements allow you to begin a refund trace online if you have not received your check within 28 days from the original IRS mailing date. Some of you will also be able to correct or change your mailing address within this application if your check was returned to us as undelivered by the U.S. Postal Service. “Where’s My Refund?” will prompt you when these features are available for your situation.

To get to your refund status, you’ll need to provide the following information as shown on your return:

Your first and last name
Your Social Security Number (or IRS Individual Taxpayer Identification Number)
Your Credit Card Information (for the successful complete of the process) [Note: Grammar was decent until here.]

Okay now, Where’s My Refund? [Note: Link to phishing site removed.]

Note: If you have trouble while using this application, please check the Requirements to make sure you have the correct browser software for this application to function properly and check to make sure our system is available.

Published on December 15th, 2005 - 4 Comments
Filed under: Identity Theft, Online

About the author: Nickel is the founder and editor-in-chief of this site. He's a thirty-something family man who has been writing about personal finance since 2005, and guess what? He's on Twitter!

Related articles...

» One Year Ago This Week (December 10th – December 16th)
» From the Archives (December 9th – December 15th)
» Ten New Money Scams, Part 2
» The Best of FCN – Selections from 12/05
» Top Tax Scams, Part 1
» Get Your Telephone Tax Refund
» Learn Who to Contact to Check Your Tax Refund Status
» When Will I Get My Tax Refund?

Was this article useful? Please sign up to receive our content via e-mail:

You will receive only the daily updates, and can unsubscribe at anytime.

4 Responses to “IRS Tax Refund Phishing Scheme”

  1. 1
    Jeremy Says:

    Thanks for this heads up. I’ve linked to the post at my new blog Financial Revolution. What I find so surprising is not how legit this message looked, but why so many of these scams look so bad (typos, poor quality images, bad grammar.) Considering how lucrative these things are supposed to be, I would think more thiefs would put in the time to do it well.

  2. 2
    FMF Says:

    Yep, they just get more and more sophisticated. I have to keep a list of legit sites that I frequent and even then, it’s still a minefield (like when you get an email from “PayPal”).

  3. 3
    EFM Says:

    Thank you! I got that same email! But for my stimulus! Ugh! I can’t believe I really was thinking that it was real! Thanks so much!

  4. 4
    Sagedragon Says:

    I’ve had three of the same scam mails. One of the links is actually an executable file that presumably unloads nasties on your machine, most likely keystroke loggers with a Trojan back end.
    The Subject is: Support IRS.gov
    Email return is: information@irs.security.gov
    The issue supposedly is Unreported/Underreported Income (Fraud Application) … at least they got that right.
    The body includes:
    To download your tax statement from Internal Revenue Service (IRS) website (click on the link below):

    download tax statement: commensurate-00000700955160US.pdf

    Which looks for to the casual observer like an Adobe Acrobat file. But the actual link includes a “.exe” extension.

    This may be more invasive than just a phishing message.

Leave a Reply

Top Cards by Category

 
Apply now for Chase Freedom® Visa - $200 Bonus Cash Back

Earn $200 Bonus Cash Back after you make $500 in purchases in your first 3 months. 5% Cash Back on up to $1,500 spent in bonus categories each quarter.

 
Apply now for http://www.fivecentnickel.com/rewardpoints.html

Earn 3X points on airfare, 2X points on gas and groceries, and 1X points on everything else.

 
Apply now for American Express® Gold Card

Receive 10,000 Membership Rewards bonus points when you spend $1,000 in 3 months of Card membership.

 
Apply now for http://www.fivecentnickel.com/lowratebalancetransfercreditcards.html

Enjoy a 0% introductory rate for 18 months on Balance Transfers and 6 months on Purchases. Earn up to 5% cash back in categories that change.

 
Apply now for Discover® More Card - $0 Balance Transfer Fee!

Enjoy no balance transfer fee for a limited time. 0% introductory rate on Balance Transfers and Purchases. Earn up to 5% Cashback Bonus in categories that change like gas, restaurants, department stores and more. Limitations apply*

 
Apply now for http://www.fivecentnickel.com/lowrateplatinumcreditcards.html

Enjoy no balance transfer fee for a limited time. 0% introductory rate on Balance Transfers and Purchases. Earn up to 5% Cashback Bonus in categories that change like gas, restaurants, department stores and more. Limitations apply*

 
Apply now for The Business Platinum Card® from American Express OPEN

Enjoy amenities for you and your business, like: complimentary airport club access, including American Airlines Admirals Club(R) lounges.

 
Apply now for http://www.fivecentnickel.com/studentcreditcards.html

5% Cashback Bonus in categories that change like gas, restaurants, department stores and more. Limitations apply*. Up to 1% unlimited Cashback Bonus on everything else. No annual fee

 
Apply now for American Express Premier Rewards Gold Card

Earn 3X points on airfare, 2X points on gas and groceries, and 1X points on everything else.

 
Apply now for http://www.fivecentnickel.com/credit-cards/credit/bad

Reports to 3 major credit bureaus monthly and acceptance at millions of locations worldwide, including website purchases and reservations.

Previous
Pause
Next

FiveCentNickel User Survey