Sunday, June 21, 2026

Security Boulevard Logo

Security Boulevard

The Home of the Security Bloggers Network

Community Chats Webinars Library
  • Home
    • Cybersecurity News
    • Features
    • Industry Spotlight
    • News Releases
  • Security Creators Network
    • Latest Posts
    • Syndicate Your Blog
    • Write for Security Boulevard
  • Webinars
    • Upcoming Webinars
    • Calendar View
    • On-Demand Webinars
  • Events
    • Upcoming Events
    • On-Demand Events
  • Sponsored Content
  • Chat
    • Security Boulevard Chat
    • Marketing InSecurity Podcast
    • Techstrong.tv Podcast
    • TechstrongTV - Twitch
  • Library
  • Related Sites
    • Techstrong Group
    • Cloud Native Now
    • DevOps.com
    • Security Boulevard
    • Techstrong Research
    • Techstrong TV
    • Techstrong.tv Podcast
    • Techstrong.tv - Twitch
    • Devops Chat
    • DevOps Dozen
    • DevOps TV
  • Media Kit
  • About
    • Sponsor

  • Analytics
  • AppSec
  • CISO
  • Cloud
  • DevOps
  • GRC
  • Identity
  • Incident Response
  • IoT / ICS
  • Threats / Breaches
  • More
    • Blockchain / Digital Currencies
    • Careers
    • Cyberlaw
    • Mobile
    • Social Engineering
  • Humor
Data Security Security Bloggers Network Social Engineering Threats & Breaches 

Home » Cybersecurity » Data Security » Lookout for Tax Scams

SBN

Lookout for Tax Scams

by SEORG on April 8, 2019

With the April 15th filing deadline date just a week away, it’s important to stay vigilant and be on the lookout for tax scams. For most of us tax season is an anxious time, and criminals are eager to take advantage of our anxiety.  

During peak filing season scammers work overtime, using fake emails, websites, and spoofed phone numbers, hoping to steal our identity and money. According to the “Dirty Dozen” list published by the Internal Revenue Service (IRS), phishing and vishing continue to be the top methods used by criminals to scam us. When it comes to phishing and vishing tax scams, what should you be on the lookout for? 

Tax Scams to Lookout For

Criminals are using cleverly disguised emails that look like the IRS, such as the Tax Account Transcript scam. In this scam, criminals send emails pretending to be from “IRS Online” with an attachment labeled “Tax Account Transcript” as bait to entice users to open documents containing malware.   

Another phishing scam to lookout for are emails that contain the direction “you are to update your IRS e-file immediately.” This phishing scam includes links to fake websites that impersonate the official IRS website. What should you do if you receive a phishy email? 

What You Should Do with a Phishy Email

Did you know the IRS does not initiate contact through unsolicited emails for personal or financial information?  So, what should you do if you receive one of these phishing tax scams? The IRS recommends the following: 

  • Do not open the email. 
  • Do not open any attachments or click on any links. They may have malicious code that will infect your computer. 
  • If using an employer’s computer, notify the company’s technology professionals. 
  • Report the phishing email by forwarding it to [email protected].   

 

The official IRS website provides a webpage where you can get your personal tax transcript online. You don’t need to be sent a specific link to access the data.  Stay vigilant and be on the lookout for tax scams that arrive via email. 

Tax Scams to Lookout For

The IRS is warning about a new scam where criminals are making unsolicited phone calls claiming to be from the Taxpayer Advocate Service (TAS), an independent organization within the IRS. What makes this scam dangerous is that the criminals are spoofing the phone number of the TAS office making the call look legitimate to the intended victim. The criminals may also use automated calls leaving a phone number for the intended victim to call back. The goal of this scam is to get your personally identifiable information, such as your Social Security number or your individual taxpayer identification number.  

Another tax scam to lookout for is the erroneous refund. This scam involves your real bank account. Here’s how it works. Criminals steal client data from tax practitioner’s computers via phishing or other schemes and file fraudulent tax returns. Now for the twist. The criminals have the tax refund deposited into the victim’s actual bank account. That’s what gives this scam the appearance of legitimacy making it extremely dangerous.  To retrieve the funds criminals are using a variety of phone scams (vishing).  In one version thieves, posing as IRS debt collection agency officers, call the victim to say a refund was deposited by mistake and ask for the victim to forward the money to their bogus collection agency. In another version, victims receive an automated call claiming to be from the IRS. The victim is threatened with fraud charges, an arrest warrant, and suspension of their Social Security benefits. The criminal ends the message by leaving a bogus telephone number for the victim to call. This scam is very dangerous, because it preys on the heightened anxiety taxpayers feel during peak filing season and the fear that most have of the IRS. What should you do if criminals start calling? 

What You Should Do If Criminals Start Calling

The IRS will not initiate contact with you by phone to discuss your account, or to request personal or financial information. And IRS employees will not call demanding immediate payment or threaten you with arrest or legal action. So, what should you do if you start receiving phones calls purportedly from the “IRS?”  

If the caller claims to be with TAS, hang up. It may feel rude, but remember, the IRS will not initiate contact with you by phone to request personal or financial information. If the caller claims to be with the IRS and they say it’s about an erroneous refund, hang up. Think critically. If you know that you have not yet filed a tax return, then you should not have a tax refund from the IRS in your bank account. So, if your bank account is showing a deposit from the IRS, it no doubt means a thief has stolen your identity, filed a fraudulent tax return, and is now calling you to get the money.  The IRS recommends the following actions to return the funds and avoid being scammed.  

If the fraudulent refund is a direct deposit: 

  • Contact the Automated Clearing House (ACH) department of the bank/financial institution where the direct deposit was received and have them return the refund to the IRS. 
  • Call the IRS toll-free at 800-829-1040 (individual) or 800-829-4933 (business) to explain why the direct deposit is being returned. 

If the fraudulent refund is a paper check: 

  • Write “Void” in the endorsement section on the back of the check. 
  • Submit the check immediately to the appropriate IRS location.  
  • Don’t staple, bend, or paper clip the check. 
  • Include a note stating, “Return of erroneous refund check because (and give a brief explanation of the reason for returning the refund check).” 

If you become a victim of the erroneous refund scam, you may find that the tax return you prepare will be rejected, because a return bearing your Social Security number is already on file. If that’s the case, you will need to inform the IRS that you are a victim of a tax preparer data breach. More information and the detailed steps to follow can be found in the Taxpayer Guide to Identity Theft.   

Stay Safe This Tax Season

The April 15th deadline is almost here.  Nearly 1 out of every 2 Americans are at increased risk for tax fraud due to the Equifax breach.  Don’t let thieves and criminals take advantage of the anxiety tax season brings or your fear of the IRS.  Stay vigilant. Be on the lookout for tax scams.  

The IRS will not initiate contact with you by either phone or email to discuss your account, or to request personal or financial information. Additionally, IRS employees will not call demanding immediate payment, or threaten you with arrest or legal action. So, don’t open any emails purporting to be from the IRS, and if you’re not expecting a call from the IRS, hang up.   

Sources:
https://www.irs.gov/newsroom/irs-kicks-off-annual-list-of-most-prevalent-tax-scams-agency-warns-taxpayers-of-pervasive-phishing-schemes-in-its-dirty-dozen-campaign
https://www.irs.gov/newsroom/irs-warns-of-tax-transcript-email-scam-dangers-to-business-networks
https://www.irs.gov/newsroom/tax-scams-consumer-alerts
https://www.irs.gov/individuals/get-transcript
https://www.irs.gov/newsroom/irs-warns-of-new-phone-scam-using-taxpayer-advocate-service-numbers
https://www.irs.gov/newsroom/scam-alert-irs-urges-taxpayers-to-watch-out-for-erroneous-refunds-beware-of-fake-calls-to-return-money-to-a-collection-agency
https://www.social-engineer.org/framework/attack-vectors/vishing/
https://www.irs.gov/newsroom/taxpayer-guide-to-identity-theft
https://www.social-engineer.com/stay-safe-tax-season-equifax/ 

Image:
www.social-engineer.org

The post Lookout for Tax Scams appeared first on Security Through Education.


Recent Articles By Author
  • DEF CON 29: SEVillage Recap
  • In the Name of Psychology
  • DEF CON® Kids: Preparing Them for the Future
More from SEORG

*** This is a Security Bloggers Network syndicated blog from Security Through Education authored by SEORG. Read the original post at: https://www.social-engineer.org/general-blog/lookout-for-tax-scams/

April 8, 2019April 8, 2019 SEORG Data breach, dirty dozen, Equifax, General Social Engineer Blog, IRS, Lookout for tax scams, Phishing, Phishing Tax Scams to Lookout For, Stay Safe This Tax Season, tax scams, vishing, Vishing Tax Scams to Lookout For, What You Can Do
  • ← User-Friendly Fuzzing with Sienna Locomotive
  • Cloud Security Myth vs. Fact #1: My Provider Protects My Data →

Techstrong TV

Click full-screen to enable volume control
Watch latest episodes and shows

Tech Field Day Events

Upcoming Webinars

True Agentic SecOps at Lakehouse Scale
Agentic Software Delivery in 2026: How To Bridge The Gap Between AI Ambition and Delivery Confidence
Untangling the EU Cyber Resilience Act
The Software Supply Chain Just Got Harder to See
Building a Resilient Security Culture in the AI Era with AWS & Datadog

Podcast

Listen to all of our podcasts

Secure by Design

2 weeks ago | Jack Poller

Senator Sanders Wants to Own AI Companies — and Hand America’s Adversaries the Keys

4 weeks ago | Jack Poller

NIST’s Nine: The PQC Signature Race Moves to Round Three

4 weeks ago | Jack Poller

The Quantum Arms Race: Why Washington Just Wrote a $2 Billion Check to Nine Companies

1 month ago | Jack Poller

Beyond Moore’s Law: The Hyper-Acceleration of Autonomous AI Cyber Capabilities

1 month ago | Jack Poller

The Exception Economy: When Security Teams Stop Protecting and Start Negotiating

Press Releases

GoPlus's Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

GoPlus’s Latest Report Highlights How Blockchain Communities Are Leveraging Critical API Security Data To Mitigate Web3 Threats

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

C2A Security’s EVSec Risk Management and Automation Platform Gains Traction in Automotive Industry as Companies Seek to Efficiently Meet Regulatory Requirements

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

Zama Raises $73M in Series A Lead by Multicoin Capital and Protocol Labs to Commercialize Fully Homomorphic Encryption

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

RSM US Deploys Stellar Cyber Open XDR Platform to Secure Clients

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

ThreatHunter.ai Halts Hundreds of Attacks in the past 48 hours: Combating Ransomware and Nation-State Cyber Threats Head-On

Subscribe to our Newsletters

Most Read on the Boulevard

Databricks Acquires Cybersecurity Startup Panther Labs to Fortify AI Defense
SailPoint Acquires Entro to Continuously Detect and Monitor Non-Human Identities
MSG Breach: Knicks Take the NBA Championship, ShinyHunters Takes the Data 
Malwarebytes Finds Ad Scams Hidden in 40+ World Cup Streaming Sites
F5 Embeds Neural Network in WAF Platform to Continuously Assess Risks
FortiBleed Leak Exposes VPN Credentials for Nearly 74,000 Fortinet Devices
CVE-2026-35273: Active Exploitation of Oracle PeopleSoft Zero-Day Vulnerability
Kodak Confirms Data Breach Claimed by ShinyHunters Extortion Gang
Microsoft Defender Zero-Day Privilege Escalation Vulnerability (RoguePlanet)
GitHub Locks Down npm: What the New Install Defaults Mean for Your Supply Chain

Industry Spotlight

NYC Sewers Crawling With Rats and Potential Bad Actors 
Cybersecurity Featured Industry Spotlight Security Awareness Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight Threats & Breaches 

NYC Sewers Crawling With Rats and Potential Bad Actors 

June 18, 2026 Teri Robinson | 2 days ago 0
Anthropic Mythos AI Model Strikes Fear in Trump Administration, U.S. Banks
Cloud Security Cybersecurity Data Privacy Data Security Featured Incident Response Industry Spotlight Malware Mobile Security Network Security News Security Awareness Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight Threats & Breaches Vulnerabilities 

Anthropic Mythos AI Model Strikes Fear in Trump Administration, U.S. Banks

April 12, 2026 Jeffrey Burt | Apr 12 Comments Off on Anthropic Mythos AI Model Strikes Fear in Trump Administration, U.S. Banks
The Day the Security Music Died
AI and Machine Learning in Security Cybersecurity Featured Industry Spotlight Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight 

The Day the Security Music Died

April 8, 2026 Alan Shimel | Apr 08 Comments Off on The Day the Security Music Died

Top Stories

Job Seekers Make for Vulnerable Targets
Cybersecurity Data Privacy Data Security Featured News Security Awareness Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight 

Job Seekers Make for Vulnerable Targets

June 19, 2026 Teri Robinson | 1 day ago 0
MSG Breach: Knicks Take the NBA Championship, ShinyHunters Takes the Data 
Cybersecurity Data Security Featured News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight 

MSG Breach: Knicks Take the NBA Championship, ShinyHunters Takes the Data 

June 18, 2026 Teri Robinson | 2 days ago 0
Trying to Control AI is Like Holding Sand
AI and Machine Learning in Security Cybersecurity Featured News Security Boulevard (Original) Social - Facebook Social - LinkedIn Social - X Spotlight 

Trying to Control AI is Like Holding Sand

June 17, 2026 Alan Shimel | 3 days ago 0

Security Humor

Fortinet® Follies

Fortinet® Follies

Download Free eBook

[su_panel border="0px solid #ddd" radius="0" text_align="center" padding-top="0px" padding-bottom="0px"]
Managing the AppSec Toolstack
[/su_panel]

Security Boulevard Logo White

DMCA

Join the Community

  • Add your blog to Security Creators Network
  • Write for Security Boulevard
  • Bloggers Meetup and Awards
  • Ask a Question
  • Email: [email protected]

Useful Links

  • About
  • Media Kit
  • Sponsor Info
  • Copyright
  • TOS
  • DMCA Compliance Statement
  • Privacy Policy

Related Sites

  • Techstrong Group
  • Cloud Native Now
  • DevOps.com
  • Digital CxO
  • Techstrong Research
  • Techstrong TV
  • Techstrong.tv Podcast
  • DevOps Chat
  • DevOps Dozen
  • DevOps TV
Powered by Techstrong Group
Copyright © 2026 Techstrong Group Inc. All rights reserved.
×

Insert/edit link

Enter the destination URL

Or link to existing content

    No search term specified. Showing recent items. Search or use up and down arrow keys to select an item.