Claim: The IRS is sending out unsolicited e-mail providing taxpayers with a web form to use to check on the status of their federal income tax returns and refunds.
Examples: [Collected on the Internet, 2005]
You filed your tax return and you're expecting a refund. You have just one question and you want the answer now - Where's My Refund?
Access this secure Web site to find out if the IRS received your return and whether your refund was processed and sent to you.
New program enhancements allow you to begin a refund trace online if you have not received your check within 28 days from the original IRS mailing date. Some of you will also be able to correct or change your mailing address within this application if your check was returned to us as undelivered by the U.S. Postal Service. "Where's My Refund?" will prompt you when these features are available for your situation.
To get to your refund status, you'll need to provide the following information as shown on your return:
Okay now, Where's My Refund?
Under the Privacy Act of 1974, we must tell you that our legal right to ask for information is Internal Revenue Code Sections 6001, 6011, 6012(a) and their regulations. They say that you must furnish us with records or statements for any tax for which you are liable, including the withholding of taxes by your employer.
December 2005 we began seeing copies of the above-reproduced phishing scam, an e-mail purporting to come from the Internal Revenue Service (sent with a return address of <email@example.com>) and offering consumers a link to a handy web form they can use to check the status of their federal income tax returns and refunds. Of course, the web form the recipient is directed to after clicking on the provided link is not from the real IRS web site, but an imitation hosted on a server in a foreign country (Mexico in the example we received) that harvests information scammers can use for identity and financial theft by prompting the user to input all sorts of personal data (name, Social Security number, address) as well as other financial information (credit card number, ATM PIN).
The IRS does not ask for personal identifying or financial information via unsolicited
Last updated: 20 December 2005