"The holidays and tax season present great opportunities for scam artists to try stealing valuable information through fake emails," said IRS Commissioner Chuck Rettig, in a statemtent. "Watch your inbox for these sophisticated schemes that try to fool you into thinking they're from the IRS or our partners in the tax community. Taking a few simple steps can protect yourself during the holiday season and at tax time."
Not all phishing attempts are emails — some are phone scams. "One of the most common phone scams is the caller pretending to be from the IRS and threatening the taxpayer with a lawsuit or with arrest if payment is not made immediately, usually through a debit card," the IRS warns.
Phishing attacks, especially online phishing scams, "are popular with criminals because there is no foolproof technology to defend against them," the IRS said. "Users are the main defense. When users see a phishing scam, they should ensure they don't take the bait."
The IRS reminds taxpayers that it doesn't initiate spontaneous contact by email to request personal or financial information. It listed the following steps taxpayers can take to protect against phishing and other tax-related schemes:
- Be vigilant; be skeptical. Never open a link or attachment from an unknown or suspicious source. Even if the email is from a known source, approach with caution.
- Phishing schemes thrive on people opening the message and clicking on hyperlinks. When in doubt, don't use hyperlinks and go directly to the source's main web page.
- Use security software to protect against malware and viruses found in phishing emails. Some security software can help identify suspicious websites that are used by cybercriminals.
- Use strong passwords to protect online accounts. Each account should have a unique password. Use a password manager if necessary.
- Use multi-factor authentication when offered. Some online financial institutions, email providers and social media sites offer multi-factor protection for customers.
