IRS Issues Warning on New Email Phishing Scam

A new email phishing scam involving false claims about electronically filed tax returns was reported Aug. 22 by the IRS.

The agency, along with its Security Summit partners, warned tax professionals and individual taxpayers of unsolicited emails with subject lines that use the phrases “Automatic Income Tax Reminder” or “Electronic Tax Return Reminder.”

The emails have links with a fraudulent web address that appears similar to the official www.IRS.gov website, the agency said in news release (IR-2019-145). The email contains details about an electronic tax return, financial account, or a refund. Information about a “temporary password” or a “one-time password” link to a malicious file, the IRS said.

The new scam uses dozens of compromised websites and web addresses, making the phishing attempt a challenge to shut down, the IRS said. By infecting computers with malware, cybercriminals try to gain control of a device or download software that tracks keystrokes, eventually revealing passwords needed to access sensitive data, such as financial accounts.

The IRS repeatedly has said the agency does not initiate contact with employers or individual taxpayers by email, text messages, and social media channels to request financial information.

“The IRS does not send emails about your tax refund or sensitive financial information,” IRS Commissioner Chuck Rettig said. “This latest scheme is yet another reminder that tax scams are a year-round business for thieves.”

Phishing scams should be reported to the IRS by sending malicious emails to phishing@irs.gov.

The Security Summit was founded in 2015 to help provide ways to protect sensitive data and prevent tax fraud. The summit consists of the IRS and representatives of the software industry, tax-preparation firms, payroll and tax financial product processors, and state tax administrators to fight identity theft and tax fraud.

The IRS offers additional information for employers and tax professionals: Publication 457, “Safeguarding Taxpayer Data,” and Publication 5293, “Data Security Resource Guide for Tax Professionals.”