Tax Time Scams

We need to always be vigilant in regards to scams and our data security and even more so as particular events loom, like the EOFY TAX time.

As the tax filing deadline approaches, scammers are ramping up their efforts, exploiting the heightened sense of urgency to trick individuals into divulging sensitive information. A recent phishing campaign highlights the cunning tactics employed by cybercriminals during this critical time.


​​

One alarming example involves an email with the subject line "Urgent reminder," containing a PDF attachment with a QR code. The email, purporting to be from the "Tax Services Department," warned recipients of a "mandatory review and update" of their tax records, claiming it needed to be completed by a certain deadline, to avoid penalties. The email instructed recipients to scan the QR code or click a link to access a "secure tax portal."

However, this was a carefully crafted phishing attempt. Scanning the QR code led to a malicious website, cleverly concealed through doubleclick.net redirects. Fortunately, cybersecurity software like Malwarebytes detected and blocked the real destination.

​Upon bypassing bot protection, the phishing site presented a Microsoft login page, pre-filled with an email address, prompting users to enter their password. Entering credentials would send them directly to a Russian receiver, who could then sell the information on the dark web or use it to access the victim's Microsoft accounts.

This is just one example of the numerous tax scams circulating during this period. The IRS's annual "Dirty Dozen" list highlights common schemes that threaten taxpayers' financial information. One prevalent tactic involves spreading misinformation on social media, such as promoting non-existent tax credits like the "self-employment tax credit," which led the IRS to issue a warning last year.

Phishing emails, like the one described, remain a significant threat. While AI-generated emails can appear convincing, certain red flags can help identify them:

• "Too good to be true" offers: Promises of large, unexpected tax returns are often used to lure victims.
• Sense of urgency: Scammers create a sense of panic to prevent victims from thinking critically.
• Unusual contact methods: The IRS rarely initiates contact via email, especially for sensitive information.

Protecting Yourself from Scams:
In an increasingly digital world, online scams are becoming more sophisticated. To protect yourself, consider these tips:

• Verify website legitimacy: Always check the website's address bar and be wary of sponsored search results.
• Be cautious of unsolicited contact: Avoid responding to unsolicited calls or emails, especially those demanding immediate action.
• Use official channels: Contact organizations directly through their official websites or phone numbers.
• Secure sensitive information: Never send personal details like bank account or Social Security numbers via email. Use secure methods on IRS.gov.
• Employ robust security software: Use security software like Malwarebytes Premium to block phishing domains and scam sites.
• Educate yourself: Familiarize yourself with the IRS's guidelines on identifying legitimate communication.

The rise in sophisticated scams emphasizes the need for vigilance during tax season. By staying informed and taking precautions, individuals can protect themselves from becoming victims of these fraudulent schemes.

​Ep 318 - Image by AI