Important Member Alert: Tax Season Phishing Scams

It’s tax filing season, and the Internal Revenue Service (IRS) and state tax agencies have issued warnings related to a recent increase in sophisticated phishing emails. The emails appear to come from the IRS and demand a payment or threaten to seize tax refunds as a result of non-payment.

What is phishing? Phishing is a tactic cyber criminals use to collect an individual’s online banking, credit card, or other identifying account information. Once received, the cyber criminals can use your information and make transactions as you.

The tax refund season is the time of year in which the majority of tax related scams occur and there is increased vulnerability. This year, the IRS has reported a 60% increase in phishing emails attempting to steal taxpayer funds and tax-related information.

Phishing emails can be hard to detect. Often, intimidation tactics and urgent requests are commonly used by cyber criminals. The emails sent in a phishing attempt will appear to come from a trusted source, using a spoofed or compromised email address. Phishing emails usually contain stolen logos and often include hyperlinks to malicious websites, or contain attachments that are embedded with malware or viruses.

Targeted tax time victims have reported that their emails contained the following:

  • An email originating from IRS Online
  • Contained an attachment titled “Tax Account Transcript”
  • A subject line using the phrase “Tax Transcript”

In addition to email phishing scams, similar phone scams have also been reported. A common phishing phone attempt involved a caller claiming to be from the IRS and threatening victims with a lawsuit or arrest if a tax payment isn’t made immediately with a debit card.

To reduce your risk of falling victim to a phishing scam:

  • Remember that the IRS will never initiate contact with taxpayers via email, text, or social media network to request personal or financial information.
  • The IRS also will never call a taxpayer and threaten a lawsuit or arrest.
  • Do not click on links or open email attachments from an unknown or suspicious source. Even if the email appears to be from someone you know, subtle variations will be present in the sender’s email address (for example: JohnSmith1@abc.com instead of JohnSmithI@abc.com).
  • Another red flag for email recipients includes grammatical errors and spelling mistakes. Legitimate professional organizations and agencies typically do not contain such errors in their communications.
  • For more information on preventing and reporting tax scams to the IRS, click here.

Article Source: CUNA Risk Alert, December 2018

Important Member Alert: Tax Scams

We are in the midst of tax season, and you guessed it – the fraudsters are at it again! Please be on the lookout for the following tax scams, where the scammers have been posing as the IRS via phone or email. The most important thing to remember here is that the IRS will never contact you via phone or email.

Click here to watch a short video from NBC Nightly News, which explains some of the recent tax scams.

In the first tax scam scenario, fraudsters will have already obtained an individual’s non-public personal information (name, SSN, date of birth) and bank account information. They may have obtained this information in many different ways (dumpster diving, computer hacking, stolen wallet, pretext calling). They will then file a false tax return using the individual’s name and information. Once they receive confirmation that the tax return has been deposited into the individual’s bank account, they will contact the individual via telephone posing as an employee of the IRS. They will state the funds were deposited to their account in error and order them to pay the funds back or suffer penalties.

In the second tax scam scenario, a fraudster will contact an individual via phone or email, again posing as a representative from the IRS. They will state that they owe back taxes and demand payment from the individual. They will attempt to obtain the individual’s checking account/bank routing number or credit card information to directly debit their account, or they may instruct them to mail a check.

Once again, the IRS will never contact anyone via phone or email – they will only use regular US postal mail. If you receive a phone call or email from the “IRS” – it is not the IRS.

Have you received a tax refund you didn’t file for yet?

  • Contact your financial institution immediately.
  • Have your financial institution return anything direct deposited into your account to the IRS, and then call the IRS at 1-800-829-1040
  • For an actual check received in the mail, write VOID across the front of the check and mail it to the IRS location closest to you by entering your zip code at IRS.gov
  • If you cashed the check, you will need to reimburse the IRS with a personal check.
  • For further instructions, visit the tax fraud section of the IRS’ website here.

If you feel that any of your First Financial accounts may have been compromised as a result of a tax scam, please contact Member Services at 732-312-1500 Monday through Friday 8am-6pm EST, or Saturday 8:30am-1pm.

Article Sources: NBC Nightly News and IRS.gov