Because I just ran into a nasty scam email that went to my work account, I figured I'd spread the word in case anyone else sees one.
I just received an email from a spoofed irs.gov email address, saying info on my tax returns were incomplete and that I had to fill out the attached form in order to process my refund. As I did e-file for the first time ever this year, I actually looked at it twice.
However:
1) It went to my work email address, which is not the one I used with my e-file.
2) The "attached form" was in a zip file, so you couldn't see what the file actually was.
Here's the info from the actual IRS website:
If you receive an unsolicited e-mail communication claiming to be from the IRS, please forward the original message to:
phishing@irs.gov using the instructions provided below. You may not receive an individual response to your e-mail because of the volume of reports we receive each day.
- The IRS does not initiate taxpayer communications through e-mail. In addition, the IRS does not request detailed personal information through e-mail or ask taxpayers for the PIN numbers, passwords or similar secret access information for their credit card, bank or other financial accounts.
- Do not open any attachments to questionable e-mails, which may contain malicious code that will infect your computer. Please be advised that the IRS does not initiate contact with taxpayers via e-mails.
Sadly, you know emails like this actually get people. :(