Tilted Forum Project Discussion Community  

Go Back   Tilted Forum Project Discussion Community > Chatter > General Discussion

LinkBack Thread Tools
Old 03-01-2008, 11:29 AM   #1 (permalink)
ngdawg's Avatar
Location: on the back, bitch
I ALMOST fell for it

I had gotten an email stating that I was to receive a tax refund of $129.72, seemingly from the IRS. The link went to a page identical in every way to the IRS site. I got suspicious when the page requesting my information had a spot for credit card number, 3 digit code and issuing bank. Why would the IRS want a credit card number? Besides, I'd already filed.
Turns out the IRS has that on their home page:
The IRS has seen several variations of a refund-related bogus e-mail which falsely claims to come from the IRS, tells the recipient that he or she is eligible for a tax refund for a specific amount, and instructs the recipient to click on a link in the e-mail to access a refund claim form. The form asks the recipient to enter personal information that the scamsters can then use to access the e-mail recipient’s bank or credit card account.
In a new wrinkle, the current version of the refund scam includes two paragraphs that appear to be directed toward tax-exempt organizations that distribute funds to other organizations or individuals. The e-mail contains the name and supposed signature of the Director of the IRS’s Exempt Organizations business division.

This e-mail is a phony. The IRS does not send unsolicited e-mail about tax account matters to individual, business, tax-exempt or other taxpayers.

Filing a tax return is the only way to apply for a tax refund; there is no separate application form. Taxpayers who wish to find out if they are due a refund from their last annual tax return filing may use the “Where’s My Refund?” interactive application on this Web site, IRS.gov. The only official IRS Web site is located here at www.irs.gov.
I went to the real IRS site, saw the above and deleted the email, only to find out that the IRS would like all phishing IRS scams to be forwarded. Oh well...
If anyone gets what looks to be a legitimate email from the IRS, know that they never initiate emails, never ask for CC information or other personal information. They suggest that if anything comes looking legit, type in www.irs.gov instead of clicking on a provided link. The phony looks identical in every way to the IRS site with one glaring omission-there's no news page revealing the scam.

Hopefully, this will show up, but this is the link to the phony page:http://www.charlie-colop.com.mx/sopo...=96596,00.html This is the link to the real: http://www.irs.gov/index.html
ngdawg is offline  
Old 03-01-2008, 12:13 PM   #2 (permalink)
has a plan
Hain's Avatar
Location: middle of Whywouldanyonebethere
Thanks for the heads up.

In my honest opinion, this thread really should have a better title stating that there is an IRS email scam.
Hain is offline  
Old 03-01-2008, 12:35 PM   #3 (permalink)
Knight of the Old Republic
Lasereth's Avatar
Location: Winston-Salem, NC
In most cases a simple look at the URL will tell you if it's legit or not but some phishing sites can fool you even with a good URL.

For the most part, if an agency, company, or any type of institute needs to contact you they're gonna send it through the mail or call you. Email is way too flaky to be used as any sort of communication for an important message unless it's your work email from a coworker.
Lasereth is offline  
Old 03-01-2008, 12:41 PM   #4 (permalink)
PayUp's Avatar
Location: AZ
we got a few of those that made it through to our company email. we caught on pretty quik to that crap.
Born to Lose.
PayUp is offline  
Old 03-01-2008, 12:59 PM   #5 (permalink)
Eat your vegetables
genuinegirly's Avatar
Super Moderator
Location: Arabidopsis-ville
Only makes sense that scammers would make use of tax season. Thanks for posting about it here.
"Sometimes I have to remember that things are brought to me for a reason, either for my own lessons or for the benefit of others." Cynthetiq

"violence is no more or less real than non-violence." roachboy
genuinegirly is offline  
Old 03-01-2008, 01:17 PM   #6 (permalink)
Kick Ass Kunoichi
snowy's Avatar
Location: Oregon
I got one, but I'm not filing this year, so I knew it couldn't be true. So I used my little "report phishing" button, and that was that.
If I am not better, at least I am different. --Jean-Jacques Rousseau
snowy is offline  
Old 03-01-2008, 05:47 PM   #7 (permalink)
Dumb all over...a little ugly on the side
Sion's Avatar
Location: In the room where the giant fire puffer works, and the torture never stops.
ANY unsolicited email that directs you to a page asking for personal (ss#) or financial (cc#) information is ALWAYS, ALWAYS, ALWAYS one of two things:

1. spam (as in they are trying to sell you something)


2. a scam (as in they are trying to steal from you)

if people would just learn this one simple rule....
He's the best, of course, of all the worst.
Some wrong been done, he done it first. -fz

I jus' want ta thank you...falettinme...be mice elf...agin...
Sion is offline  
Old 03-01-2008, 09:11 PM   #8 (permalink)
<3 TFP
xepherys's Avatar
Location: 17TLH2445607250
Have you ever given the IRS your email address? That would've been a big clue :-p
The prospect of achieving a peace agreement with the extremist group of MILF is almost impossible...
-- Emmanuel Pinol, Governor of Cotobato

My Homepage
xepherys is offline  
Old 03-02-2008, 10:38 AM   #9 (permalink)
ngdawg's Avatar
Location: on the back, bitch
Originally Posted by xepherys
Have you ever given the IRS your email address? That would've been a big clue :-p
Actually, no. We filed online and used the spouse's email addy. That was the first red flag....Once I clicked on the link provided and saw requests for my CC number and bank name, I was pretty sure this was a scam. The question marks really started when I compared the two pages, fake to real-took some clicking around on the real one to see the truth because I didn't look at the browser window to see the full link. That was a DUH!......
ngdawg is offline  
Old 03-02-2008, 01:05 PM   #10 (permalink)
Lover - Protector - Teacher
Jinn's Avatar
Location: Seattle, WA
The page is down, and even better.... Firefox freaks out when you to the link. It says THIS IS A SUSPECTED WEB FORGERY with a big popup. I guess the news got around to Firefox/Google about this specific URL.
"I'm typing on a computer of science, which is being sent by science wires to a little science server where you can access it. I'm not typing on a computer of philosophy or religion or whatever other thing you think can be used to understand the universe because they're a poor substitute in the role of understanding the universe which exists independent from ourselves." - Willravel
Jinn is offline  
Old 03-02-2008, 02:36 PM   #11 (permalink)
ngdawg's Avatar
Location: on the back, bitch
Originally Posted by JinnKai
The page is down, and even better.... Firefox freaks out when you to the link. It says THIS IS A SUSPECTED WEB FORGERY with a big popup. I guess the news got around to Firefox/Google about this specific URL.
The IRS has an email address devoted to phishing. I know I sent the link to it and probably several more did as well. That was even faster than I got my refund(the real one)
ngdawg is offline  


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

All times are GMT -8. The time now is 02:50 AM.

Tilted Forum Project

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2022, vBulletin Solutions, Inc.
Search Engine Optimization by vBSEO 3.6.0 PL2
© 2002-2012 Tilted Forum Project

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73