Getty
The Internal Revenue Service (IRS) is warning about a new “tax transcript” scam. In the scam, taxpayers are tricked into opening emails that look like they are from the IRS – but they potentially carry malware. Here’s what you need to know.
In the past few weeks, taxpayers have received emails pretending to be from “IRS Online.” The scam email carries an attachment labeled “Tax Account Transcript” or something similar, and the subject line uses some variation of the phrase “tax transcript.”
Tax transcripts, which are summaries of your tax records and history, are available online and taxpayers do need access to an email account in order to register. However, the IRS reminds taxpayers it does not send unsolicited emails to the public and the IRS would not email a sensitive document such as a tax transcript.
If you receive an email like this, do not open the email or the attachment.
If you are using a personal computer, delete the email or forward the scam email to [email protected].
If you are using a work computer, notify your company’s technology professionals as soon as possible. If anyone at your workplace opens the malware, it could spread throughout the network and potentially take months to successfully remove.
The malware is known to the IRS. Known as Emotet, the malware generally poses as specific banks and financial institutions in its effort to trick people into opening infected documents. According to the IRS, “[s]cores of these malicious Emotet emails were forwarded to [email protected] recently.”
The United States Computer Emergency Readiness Team (US-CERT) issued a warning in July about earlier versions of the Emotet in Alert (TA18-201A) Emotet Malware. US-CERT has called the Emotet Malware “among the most costly and destructive malware affecting state, local, tribal, and territorial (SLTT) governments, and the private and public sectors.” According to US-CERT, Emotet infections have cost SLTT governments up to $1 million per incident to remediate.
Remember that the IRS will never:
- Request personal information, PIN codes or passwords.
- Call to demand immediate payment over the phone, nor will the agency call about taxes owed without first having mailed you a bill.
- Threaten to immediately bring in local police or other law-enforcement groups to have you arrested for not paying.
- Demand that you pay taxes without giving you the opportunity to question or appeal the amount they say you owe.
- Require you to use a specific payment method for your taxes, such as a prepaid debit card, gift card or wire transfer.
- Ask for credit or debit card numbers over the phone.
Here’s what to do if you receive a suspicious phone call, letter or message:
- If you receive a call from someone claiming to be from the IRS, and you do not owe tax, or if you are immediately aware that it’s a scam, don’t engage with the scammer and do not give out any information. Just hang up.
- If you receive a telephone message from someone claiming to be from the IRS, and you do not owe tax, or if you are immediately aware that it’s a scam, don’t call them back.
- If you receive an email claiming to be from the IRS or a program affiliated with IRS, don’t respond and don’t click on any links.
- If you receive a suspicious letter or call from someone claiming to be with the IRS, do not give out any information. Call the IRS directly at 1.800.829.1040 to discuss your specific situation.
Don’t fall for the tricks. Keep your personal information safe by remaining alert. When in doubt, assume it’s a scam. For tips on protecting yourself from identity-theft-related tax fraud, click here.