Skip Links

Network World

  • Social Web 
  • Email 
  • Close

IRS warns of tax phishing scheme

By Grant Gross , IDG News Service , 04/16/2007
  • Share/Email
  • Comment
  • Print

The U.S. Internal Revenue Service is warning taxpayers to be wary of e-mail messages that provide links to supposedly free tax-filing services endorsed by the agency.

The warning comes just before the IRS income tax filing deadline Tuesday. The IRS warned taxpayers of e-mails sent by Web sites "masquerading" as members of the Free File Alliance, a program allowing some taxpayers to file online for free. The only place to access the Free File program is on the IRS.gov site, the IRS said in a statement.

The IRS is investigating allegations that some Web sites claiming to be Free File partners are taking taxpayers' personal information, then depositing the returns into different bank accounts, the IRS said in a news release. The scam is a form of a phishing scam, in which fake e-mails purporting to be from banks or online retailers ask recipients for account numbers and other personal information.

After taxpayers complete their forms, the fake Free Filing site changes the bank account number that the tax refund goes to, said Paul Henry, vice president of technology at Secure Computing, a cybersecurity products vendor.

"They're literally hijacking your tax return," Henry said.

In another scam, Henry got an e-mail recently saying he could speed up his tax return by depositing it into his credit card account. The e-mail asked for his credit card number and his personal identification number.

Henry expects tax scams will be prominent this week, as more people look to file taxes online than ever before. Then, after the tax filing deadline passes, he predicted there will be phishing e-mails claiming to be from the IRS, saying the recipient's filing had an error or the recipient is owed more of a refund than was claimed.

"That typically runs all the way through June," Henry said. "It's a long tax phishing season again this year."

In addition, scammers could take advantage of Microsoft DNS server vulnerability, announced last week, to redirect Web browsers from legitimate sites to phishing or other scam sites, Henry said. Taxpayers and other people doing business online should be especially careful that they're going to legitimate sites, he said.

Last week, the Computer & Communications Industry Association warned taxpayers of Web sites with IRS in the domain name that aren't affiliated with the U.S. government. Some commercial sites may be charging taxpayers for services they can get free at IRS.gov, the trade group said.

  • Share/Email
  • Comment
  • Print
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.
Network World,to go. Wherever you are. Breaking news delivered to your mobile device. Select the hottest topics in networking and start receiving Network World on your mobile device today.