If you’re a college student, faculty, or staff member, you’re going to want to pay attention to this one. IRS imposters are sending phishing emails to people with “.edu” email addresses, saying they have information about your “tax refund payment.” What do they really want? Your personal information.
Scammers are sending emails with subject lines like, “Tax Refund Payment” or “Recalculation of your tax refund payment.” The email asks you to click a link and submit a form to claim your “refund.”
What happens if you click the link? The website asks for personal information, including your name, Social Security number (SSN), date of birth, prior year’s annual gross income (AGI), driver’s license number, address, and electronic filing PIN. Scammers can use or sell this information for identity theft.
The emails can look really real and include the IRS logo. But no matter what the email looks like or says, one thing stays true: the IRS will not first contact you by email. They will always start by sending you a letter. And, to confirm that it’s really the IRS, you can call them directly at 800-829-1040.
If you clicked a link in one of these emails and shared personal information, file a report at IdentityTheft.gov to get a customized recovery plan based on what information you shared.
If you spotted this scam, the IRS is asking you to forward the email as an attachment to phishing@irs.gov. And tell us too, at ReportFraud.ftc.gov.
Looking to find the status of your pending refund? Go to Where’s My Refund on IRS.gov.
1 Comments
Read Our Privacy Act Statement
It is your choice whether to submit a comment. If you do, you must create a user name, or we will not post your comment. The Federal Trade Commission Act authorizes this information collection for purposes of managing online comments. Comments and user names are part of the Federal Trade Commission’s (FTC) public records system, and user names also are part of the FTC’s computer user records system. We may routinely use these records as described in the FTC’s Privacy Act system notices. For more information on how the FTC handles information that we collect, please read our privacy policy.
Comment Policy
This is a moderated blog; we review all comments before they are posted. We expect participants to treat each other and the bloggers with respect. We will not post comments that do not comply with our commenting policy. We may edit comments to remove links to commercial websites or personal information before posting them.
We won’t post:
Comments submitted to this blog become part of the public domain. To protect your privacy and the privacy of others, please do not include personal information. Also, do not use this blog to report fraud; instead, file a complaint.