The Internal Revenue Service has issued a consumer alert regarding a new, two-step
e-mail scam that falsely promises recipients they will receive $80 for participating
in an online customer satisfaction survey.
In the scam, an unsuspecting taxpayer receives an unsolicited e-mail that appears
to come from the IRS. The e-mail contains a URL linking to an online “Member
Satisfaction Survey”.
“We have seen many e-mail scams using the IRS name,” IRS Deputy
Commissioner for Operations Support, Linda Stiff explained. “The IRS does not
initiate contact with taxpayers through e-mail. Taxpayers should always use
caution when they receive unsolicited e-mails.”
In this case, the e-mail notifies the recipient that he or she has been randomly
selected to participate in a survey. In return, the e-mail says that the IRS will credit $80 to the
taxpayer’s account. There are references to the IRS in the “from”
line and the “subject” line of the e-mail. The link to the survey
and a copyright statement at the bottom of the e-mail also reference the IRS.
The survey form features the IRS logo.
In addition to standard customer satisfaction survey questions, the survey
requests the name and phone number of the participant, and also asks for credit
card information. Once the fraudsters have a name and phone number, they will
presumably call the participant and attempt to retrieve other financial information.
The apparent objectives of this scam are to use the participant’s name
and financial data to withdraw funds from the taxpayer’s bank account,
run up charges on a credit card or take out loans in the taxpayer’s name.
Tricking victims into revealing private personal and financial information
over the Internet, telephone or other means is a practice known as “phishing”.
The IRS stressed that it does not send unsolicited e-mail. Additionally, the
IRS never asks taxpayers for PIN numbers, passwords or similar secret access
information for credit card, bank or other financial accounts.
Recipients of questionable e-mail that appears to come from the IRS are urged
not open any attachments or click on any links, and to forward the dubious e-mail
to phishing@irs.gov.
The IRS and the Treasury Inspector General for Tax Administration work with
the US Computer Emergency Readiness Team (US-CERT) and various Internet service
providers and international CERT teams to have the phishing sites taken offline
as soon as they are reported.
Since the establishment of the mail box last year, the IRS has received more
than 30,000 e-mails from taxpayers reporting almost 400 separate phishing incidents.
To date, investigations by TIGTA have identified host sites in at least 55 different
countries, as well as in the United States.
Other fraudulent e-mail scams try to entice taxpayers to click their way to
a fake IRS Web site, and ask for bank account numbers. Another widespread e-mail
scam tells taxpayers that the IRS is holding a refund for them – frequently
$63.80 – and seeks financial account information. Still another
email claims that the IRS’s “anti-fraud commission” is investigating
their tax returns.