IRS and the Social Security Administration Warn of New Email and Telephone Scams

Security Summit warns of new IRS impersonation email scam; reminds taxpayers the IRS does not send unsolicited emails

WASHINGTON — The Internal Revenue Service and its Security Summit partners today warned taxpayers and tax professionals about a new IRS impersonation scam campaign spreading nationally on email. Remember: the IRS does not send unsolicited emails and never emails taxpayers about the status of refunds.

The IRS this week detected this new scam as taxpayers began notifying phishing@irs.gov about unsolicited emails from IRS imposters. The email subject line may vary, but recent examples use the phrase “Automatic Income Tax Reminder” or “Electronic Tax Return Reminder.”

The emails have links that show an IRS.gov-like website with details pretending to be about the taxpayer’s refund, electronic return or tax account. The emails contain a "temporary password" or "one-time password" to "access" the files to submit the refund. But when taxpayers try to access these, it turns out to be a malicious file.

“The IRS does not send emails about your tax refund or sensitive financial information,” said IRS Commissioner Chuck Rettig. “This latest scheme is yet another reminder that tax scams are a year-round business for thieves. We urge you to be on-guard at all times.”

This new scam uses dozens of compromised websites and web addresses that pose as IRS.gov, making it a challenge to shut down. By infecting computers with malware, these imposters may gain control of the taxpayer’s computer or secretly download software that tracks every keystroke, eventually giving them passwords to sensitive accounts, such as financial accounts.

The IRS doesn't initiate contact with taxpayers by email, text messages or social media channels to request personal or financial information. This includes requests for PIN numbers, passwords or similar access information for credit cards, banks or other financial accounts.

Social Security and the Office of the Inspector General are also receiving reports from across the country about fraudulent phone calls from people falsely claiming to be Social Security employees. Calls can even “spoof” Social Security’s national customer service number as the incoming number on the caller ID. The new PSAs will air on TV and radio stations across the country to alert the public to remain vigilant against potential fraud.

“We urge you to always be cautious and to avoid providing sensitive information such as your Social Security number or bank account information to unknown people over the phone or Internet,” said Ann Mohageri, Social Security Regional Communications Director. “If you receive a call and are not expecting one, you must be extra careful – you can always get the caller’s information, hang up, and contact the official phone number of the business or agency the caller claims to represent. Do not reveal personal data to a stranger who calls you.”

Social Security employees do occasionally contact people--generally those who have ongoing business with the agency--by telephone for business purposes. However, Social Security employees will never threaten a person or promise a Social Security benefit approval, or increase, in exchange for information. In those cases, the call is fraudulent and people should not engage with the caller. If a person receives these calls, he or she should report the information to the OIG Fraud Hotline at 1-800-269-0271 or online at https://oig.ssa.gov/report.

“These calls appear to be happening across the country, so we appreciate SSA’s partnership in this national public outreach effort,” said Gail S. Ennis, the Inspector General for the Social Security Administration. “Our message to the public is simply this: If you or someone you know receives a questionable call claiming to be from SSA or the OIG, just hang up.”

The IRS also doesn’t call to demand immediate payment using a specific payment method such as a prepaid debit card, gift card or wire transfer. Generally, the IRS will first mail a bill to any taxpayer who owes taxes. See Report Phishing and Online Scams for more details.