Taxsoftware.com News

 

Sponsored by Taxsoftware.com   http://www.taxsoftware.com        February 12, 2008        Issue 15

Special Interest Articles

IRS Warns Taxpayers of Identity Theft Through Advanced Payment Scams

What Is Phishing?

How to Protect Yourself from Phishing

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

IRS Warns Taxpayers of Identity Theft Through Advanced Payment Scams

What Is Phishing?

How to Protect Yourself from Phishing

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

IRS Warns Taxpayers of Identity Theft Through Advanced Payment Scams

What Is Phishing?

How to Protect Yourself from Phishing

                 

IRS Warns Taxpayers of Identity Theft Through Advanced Payment Scams

The IRS is warning taxpayers to beware of several current e-mail and telephone scams that use the IRS name as a lure. The IRS expects such scams to continue through the end of tax return filing season and beyond. To date, the IRS has received almost 33,000 forwarded scam e-mails, reflecting more than a thousand different incidents.

The IRS cautions taxpayers to be on the lookout for scams involving proposed advance payment checks. Although the government has not yet enacted an economic stimulus package in which the IRS would provide advance payments, known informally as rebates to many Americans, a scam which uses the proposed rebates as bait has already cropped up.

The goal of the scams is to trick people into revealing personal and financial information, such as Social Security, bank account, or credit card numbers, which the scammers can use to commit identity theft.

Typically, identity thieves use a victim’s personal and financial data to empty the victim’s financial accounts, run up charges on the victim’s existing credit cards, apply for new loans, credit cards, services or benefits in the victim’s name, file fraudulent tax returns, or even commit crimes. Most of these fraudulent activities can be committed electronically from a remote location, including overseas. Committing these activities in cyberspace allows scamsters to act quickly and cover their tracks before the victim becomes aware of the theft.

People whose identities have been stolen can spend months or years — and their hard-earned money — cleaning up the mess thieves have made of their reputations and credit records. In the meantime, victims may lose job opportunities, may be refused loans, education, housing, or cars, or even get arrested for crimes they didn't commit.

The most recent scams brought to IRS attention are described below.       

Rebate Phone Call

At least one scheme using the word “rebate” as part of the lure has been identified. In that scam, consumers receive a phone call from someone identifying himself as an IRS employee. The caller tells the targeted victim that he is eligible for a sizable rebate for filing his taxes early. The caller then states that he needs the target’s bank account information for the direct deposit of the rebate. If the target refuses, he is told that he cannot receive the rebate.   

This phone call is a scam. No legislation has yet been enacted that would allow the IRS to provide advance payments to taxpayers or that determines the details of those payments. Moreover, the IRS does not force taxpayers to use direct deposit. Those who opt for direct deposit do so by completing the appropriate section of their tax returns, with bank routing and account information, when they file; the IRS does not gather the information by telephone.    

Refund e-Mail

The IRS has seen several variations of a refund-related bogus e-mail which falsely claims to come from the IRS, tells the recipient that he or she is eligible for a tax refund for a specific amount, and instructs the recipient to click on a link in the e-mail to access a refund claim form. The form asks the recipient to enter personal information that the scamsters can then use to access the e-mail recipient’s bank or credit card account. 

In a new wrinkle, the current version of the refund scam includes two paragraphs that appear to be directed toward tax-exempt organizations that distribute funds to other organizations or individuals. The e-mail contains the name and supposed signature of the Director of the IRS’s Exempt Organizations business division.

This e-mail is a phony. The IRS does not send unsolicited e-mail about tax account matters to individual, business, tax-exempt, or other taxpayers.

Filing a tax return is the only way to apply for a tax refund; there is no separate application form. Taxpayers who wish to find out if they are due a refund from their last annual tax return filing may use the “Where’s My Refund?” interactive application on the IRS Web site at IRS.gov. The only official IRS Web site is located at www.irs.gov.

Audit e-Mail

Another new scam brought to IRS attention contains features not seen before by the IRS.  Using a technique calculated to get almost anyone’s attention, the e-mail notifies the recipient that his or her tax return will be audited. This is the first scam of which the IRS is aware that uses this tactic to get the victim to respond.
 
Unusual for a scam e-mail, it may contain a salutation in the body addressed to the specific recipient by name. Most scam e-mails seen by the IRS are sent using the same technique used by spammers, in which hundreds of thousands of messages are sent to potential victims based on Internet address. Because of the volume, the typical scam e-mail is not personalized.

This e-mail instructs the recipient to click on links to complete forms with personal and account information, which the scammers will use to commit identity theft.

This e-mail is a phony. The IRS does not send unsolicited, tax-account-related e-mails to taxpayers.

Changes to Tax Law e-Mail

This bogus e-mail is addressed to businesses, accountants, and “Treasury” managers. It instructs them to download information on tax law changes by clicking on a series of links to publications on businesses, estate taxes, excise taxes, exempt organizations, and IRAs and other retirement plans. The IRS believes that clicking on a link downloads malware onto the recipient’s computer. Malware is malicious code that can take over the victim’s computer hard drive, giving someone remote access to the computer, or it could look for passwords and other information and send them to the scamster. There are other types of malware, as well.

The urls contained in the link are not legitimate IRS Web addresses. All IRS.gov Web page addresses begin with http://www.irs.gov/

Paper Check Phone Call

In a current telephone scam, a caller claims to be an IRS employee who is calling because the IRS sent a check to the individual being called. The caller states that because the check has not been cashed, the IRS wants to verify the individual’s bank account number. The caller may have a foreign accent.

In reality, the IRS leaves it entirely up to the individual to choose to cash or not cash a paper check. The IRS has no business need to know, and does not ask for, bank account or similar information, except when taxpayers indicate on their tax return that they are opting for the direct electronic deposit of their refund. In that case, however, it is the individual’s responsibility to provide the IRS with the correct bank routing and account numbers on the tax return; the IRS does not contact taxpayers to verify the information.

What to Do

Anyone wishing to access the IRS Web site should initiate contact by typing the IRS.gov address into their Internet address window, rather than clicking on a link in an e-mail or opening an attachment.

Those who have received a questionable e-mail claiming to come from the IRS may forward it to a mailbox the IRS has established to receive such e-mails, phishing@irs.gov, using instructions contained in an article on IRS.gov titled “How to Protect Yourself from Suspicious E-Mails or Phishing Schemes.” Following the instructions will help the IRS track the suspicious e-mail to its origins and shut down the scam. Find the article by visiting IRS.gov and entering the words “suspicious e-mails” into the search box in the upper right corner of the front page.

Those who have received a questionable telephone call that claims to come from the IRS may also use the phishing@irs.gov mailbox to notify the IRS of the scam.  

The IRS has issued previous warnings on scams that use the IRS to lure victims into believing the scam is legitimate. More information on identity theft, phishing, and telephone scams using the IRS name, logo, or spoofed (copied) Web site is available on the IRS Web site at IRS.gov.  Enter the terms “phishing,” “identity theft,” or “e-mail scams” into the search box in the upper right corner of the front page.                                                          

What Is Phishing?

Phishing, as it is called–– a word play on “fishing” for information –– is the act of sending an e-mail and falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surrendering private information, such as a Social Security number (SSN), that will be used for identity theft and to gain access to the victim’s finances.

According to the Federal Trade Commission (FTC), the nation’s consumer protection agency, phishers send an e-mail or pop-up message that claims to be from a business or organization that you may deal with — for example, an Internet service provider (ISP), bank, online payment service, or even a government agency. The message may ask you to “update,” “validate,” or “confirm” your account information. Some phishing e-mails threaten a dire consequence if you don’t respond. The messages direct you to a Web site that looks just like a legitimate organization’s site. But it isn’t. It’s a bogus site whose sole purpose is to trick you into divulging your personal information so the operators can steal your identity and run up bills or commit crimes in your name.

Alternately, the purpose of an e-mail scam may be to download malware, or malicious code, onto the recipient’s computer when the recipient opens an attachment to the e-mail or clicks on a link within the e-mail. The malware could take over the victim’s computer hard drive, giving someone remote access to the computer, or it could look for passwords and other information and send them to the scamster. There are other types of malware, as well.

How to Spot a Scam

Since the IRS rarely contacts taxpayers via e-mail, and never about their tax accounts, taxpayers should be cautious about any e-mails that claim to come from the IRS.

Many e-mail scams are fairly sophisticated and hard to detect. However, there are signs to watch for, such as an e-mail that:

bulletRequests personal and/or financial information, such as name, SSN, or bank or credit card account numbers, either in the e-mail itself or on another site to which a link in the e-mail sends the recipient.
bulletDangles bait to get the recipient to respond to the e-mail, such as mentioning a tax refund or offering to pay the recipient to participate in an IRS survey.
bulletThreatens a consequence for not responding to the e-mail, such as blocking access to the recipient’s funds.
bulletGets the Internal Revenue Service name wrong.
bulletUses incorrect grammar or odd phrasing (many of the e-mail scams originate overseas and are written by non-native English speakers).
bulletUses a really long address in any link contained in the e-mail message or one that does not include the actual IRS Web site address. To see the link address, move the mouse over the link included in the text of the e-mail.

 


How to Protect Yourself from Phishing

If you receive an unsolicited e-mail communication claiming to be from the IRS, forward the message to: phishing@irs.gov.  Remember, the IRS does not initiate contact with taxpayers via e-mails, nor does it request detailed personal information through e-mail or ask taxpayers for the PIN numbers, passwords or similar secret access information for their credit card, bank or other financial accounts, so any e-mail claiming to be from the IRS should be carefully reviewed. Forward anything suspicious. There is a chance you will not receive an individual response to your forwarded e-mail because of the volume of reports the IRS receives each day, but the IRS can use the information, URLs, and links in the suspicious e-mails you forward to trace the hosting Web site and alert authorities to help shut down the fraudulent sites.

Do not open any attachments to questionable e-mails, which may contain malicious code that will infect your computer. It is important that the original communication that you  received is included in the forwarded e-mail, as well as Internet headers. The following instructions will assist you in forwarding a phishing communication to the IRS.


In MS Outlook

You can forward a message without double clicking to open it in a new window. Highlight the e-mail in the message list of your inbox and follow the directions for your particular mail client:

bulletCreate a new message
bulletDrag and drop the phishing e-mail into the body of the new message. This ensures the original message is contained as an attachment with the appropriate Internet headers)
bulletAddress the message to phishing@irs.gov and send it

or

bulletOpen the phishing e-mail message*
bulletSelect View > Options. The Internet headers will appear. You can copy these as you normally copy text
bulletForward the original message to phishing@irs.gov, with the copied message headers pasted into this message


In Outlook Express

You can forward a message without double clicking to open it in a new window. Highlight the e-mail in the message list of your inbox and follow the directions for your particular mail client:

bulletCreate a new message
bulletDrag and drop the phishing e-mail into the body of the new message. This ensures the original message is contained as an attachment with the appropriate Internet headers)
bulletAddress the message to phishing@irs.gov and send it

or

bulletOpen the phishing e-mail message*
bulletSelect File > Properties > Details. The Internet headers will appear. You can copy these as you normally copy text
bulletForward the original message to phishing@irs.gov, with the copied message headers pasted into this message

In Mulberry

You can forward a message without double clicking to open it in a new window. Highlight the e-mail in the message list of your inbox and follow the directions for your particular mail client:

bulletSelect Message > Forward.
bulletSelect the option Include Headers in quote. Click the Forward button.
bulletAddress the forwarded message to phishing@irs.gov

In Netscape/Mozilla/Thunderbird Mail

bulletSelect View > Headers > All
bulletSelect Message > Forward As > Inline
bulletAddress the forwarded message to phishing@irs.gov

If you are using an alternative to these e-mail clients, please consult your provider for instructions on how to forward messages with Internet headers.

If the methods above do not work

bulletAt a minimum, please send the underlying link of the phishing Web site.


If the suspicious e-mail includes a file attachment, it is safer to simply highlight the message and forward it. Some configurations, especially in Windows environments, may allow the execution of arbitrary code upon opening and viewing a malicious e-mail message.

The IRS can use the information, URLs, and links in the suspicious e-mails you forward to trace the hosting Web site and alert authorities to help shut down the fraudulent sites.

You may also report misuse of the IRS name, logo, forms, or other IRS property to the Treasury Inspector General for Tax Administration toll-free at 1-800-366-4484.

You can also forward suspicious e-mails to the Federal Trade Commission at: spam@uce.gov or contact them at www.consumer.gov/idtheft 1-877-IDTHEFT (438-4338).

horizontal rule