IRS Guidance on Phishing Scams

A phishing scam starts with an unsolicited email or a website that looks legitimate but is intended to trick the user. The scam entices a person to provide personal and financial information. According to the IRS, scammers

• Pose as a trusted bank, favorite retail store, government agency, or even a tax professional.
• Tell the recipient there’s something wrong with their account.
• Tell the recipient they’re in violation of a law.
• Tell the recipient to open a link in email or download an attachment.
• Send the recipient a familiar looking – but fake – website and ask them to log in to it.

The scammers try to obtain account numbers and passwords. When the recipient clicks on the message, the scammer downloads malicious software on to the user’s device to collect personal information. The scammer might also try to fool the recipient into sending money.

The IRS warns people to be wary of unsolicited emails asking for information. It also asks individuals who receive an IRS-related or tax-themed phishing email to forward it to phishing@irs.gov.