NewsNational News

Actions

IRS warns of phishing scam

<p>The Internal Revenue Service says approximately 23 million people used its "Get Transcript" tool to download information about their tax refunds this season.</p><p>And a new report indicates from February to mid-May, criminals used the same tool to steal the IRS data of some 100,000 U.S. taxpayers. (Video via <a href="http://www.foxnews.com/us/2015/05/27/irs-says-thieves-stole-tax-info-from-100000/" target="_blank">Fox News</a>)</p><p>Now, the IRS itself wasn't hacked. Its tool worked exactly as it was supposed to. But this was theft, and it was damaging.</p><p>Thieves reportedly attempted to steal <a href="http://www.nytimes.com/2015/05/27/business/breach-exposes-irs-tax-returns.html" target="_blank">as many as 200,000</a> records in total. The IRS paid out close to $50 million in fraudulent returns before it spotted the suspicious behavior.</p><p>And this might not be the worst news. According to the IRS, the transcript tool <strong>"required prior personal knowledge about the taxpayer, including Social Security information, date of birth, tax filing status and street address before accessing IRS systems."</strong></p><p>Meaning anyone who got IRS data stolen was likely already a victim of identity theft.</p><p>As for where that personal knowledge came from — take your pick. <a href="http://arstechnica.com/security/2015/05/report-irs-admits-its-been-hacked-tax-info-stolen-for-100000-plus/" target="_blank">Ars Technica says</a> the string of recent high-profile data breaches likely provided a lot of the data thieves needed to get into IRS systems. (Video via <a href="http://www.cnbc.com/id/101323479" target="_blank">CNBC</a>, <a href="http://www.nbcnews.com/tech/security/anthem-hack-credit-monitoring-wont-catch-medical-identity-theft-n300836" target="_blank">NBC</a>)</p><p>The IRS is notifying those 200,000 people whose data thieves attempted to steal. Those 100,000 who were compromised will receive credit monitoring through the IRS and will be flagged as potential risks for theft in IRS records. (Video via <a href="http://chicago.cbslocal.com/2015/05/26/info-on-more-than-100k-taxpayers-stolen-in-irs-data-breach/" target="_blank">WBBM</a>)</p><p><em>This video includes images from Getty Images.</em></p>
Posted
and last updated

The IRS is warning the public about reports of a phone and email phishing scam, which so far has affected residents of Virginia, Maryland and Washington D.C.

The IRS said that the phishers are citing tax fraud and asking for the last four digits of victims’ Social Security numbers on a provided link. The scammers claim that information from recent data hacks is responsible.

The latest scam comes 14 months after the IRS reported a 400 percent increase in reported tax scams.

“As we approach the final days of this filing season, we continue to see these tax scams evolve.” said IRS Commissioner John Koskinen in a statement. “We don’t send emails like this, and there’s no special effort underway for people in the District, Virginia and Maryland.

“As these criminals shift their tactics, the IRS remains committed to quickly warning the taxpayers who may be targeted. Taxpayers should be on the lookout for these scams.”

The IRS says that it rarely solicits information online from taxpayers. Taxpayers can go this website to find out if they are being targeted by phishers.

According to the IRS, phishing is a scam typically carried out with the help of unsolicited email or a fake website that poses as a legitimate site to lure in potential victims and prompt them to provide valuable personal and financial information. If a criminal has this information, they can commit identity theft or financial theft.

Justin Boggs is a writer for the E.W. Scripps National Desk. Follow him on Twitter @jjboggs or on Facebook.