{"id":630,"date":"2008-03-03T18:12:36","date_gmt":"2008-03-04T02:12:36","guid":{"rendered":"http:\/\/al6400.com\/blog\/2008\/03\/03\/tax-refund-scams\/"},"modified":"2008-03-03T18:12:51","modified_gmt":"2008-03-04T02:12:51","slug":"tax-refund-scams","status":"publish","type":"post","link":"https:\/\/www.al6400.com\/blog\/tax-refund-scams\/","title":{"rendered":"Tax Refund Scams"},"content":{"rendered":"<p>It\u00e2\u20ac\u2122s about that time of year again where we all start to file our taxes with many of us hoping to get a refund.  At the same time, this is when people begin to prey on the less technically savvy by stealing their personal inform or also known as phishing scams.<\/p>\n<p>I just received this e-mail about getting a tax refund and the funny thing is that it is targeted at a US citizen while I\u00e2\u20ac\u2122m here in Canada.<\/p>\n<blockquote><p>Subject: Tax Refund (Message ID V3418364T73)<br \/>\nDate: Tue, 4 Mar 2008 09:34:07 -0500<br \/>\nMIME-Version: 1.0<br \/>\nContent-Type: text\/html; charset=&#8221;Windows-1251&#8243;<br \/>\nContent-Transfer-Encoding: 7bit<br \/>\nX-Priority: 3<br \/>\nX-MSMail-Priority: Normal<br \/>\nX-Mailer: Microsoft Outlook Express 6.00.2600.0000<br \/>\nX-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000<\/p>\n<p>A Secure Way to Receive Your Tax Refund<\/p>\n<p>After the last annual calculations of your fiscal activity we have determined that<br \/>\nyou are eligible to receive a tax refund of *$873.20*. Please submit the tax refund request and allow us 3-9 days in order to process it.<\/p>\n<p>A refund can be delayed for a variety of reasons. For example submitting invalid records or applying after the deadline.<\/p>\n<p>To access the form for your tax refund, please click here <\/p>\n<p>*Note:* For security reasons, we will record your ip-address, the date and time.<br \/>\nDeliberate wrong inputs are criminally pursued and indicated.<\/p>\n<p>Regards,<br \/>\nInternal Revenue Service<\/p>\n<p>Copyright 2008, Internal Revenue Service U.S.A. All rights reserved.<\/p><\/blockquote>\n<p>I decided to visit the site anyways for the sake of documentation.  Typically what these scams do is that they copy the pages and files from the real sites to make it appear as if you are on the official site as seen here:<\/p>\n<p align=\"center\"><img decoding=\"async\" src=\"http:\/\/www.al6400.com\/bpic\/taxrefundscam.gif\" \/><\/p>\n<p>Of course, a lot of people assume it is legitimate and then proceed to fill out the forms that request for a great deal amount of personal details such as your social insurance number and credit card information.<\/p>\n<p align=\"center\"><img decoding=\"async\" src=\"http:\/\/www.al6400.com\/bpic\/taxrefundscam3.gif\" \/><\/p>\n<p>You know what is going to happen next if you do that.  Basically, you will get no refund and someone else will more than likely try to use your personal details to open accounts under your name and you\u00e2\u20ac\u2122ll have one big messy situation of identity theft.<\/p>\n<p>For phishing scams in general, one of the easiest non technical way to find out if the site you are on is legitimate is to simply look at the url address on your browser.  For example, in this situation the real site is located at http:\/\/www.irs.gov\/ .  If we take a look at the url as shown in this screenshot you would notice that we are on a completely different site.  <\/p>\n<p align=\"center\"><img decoding=\"async\" src=\"http:\/\/www.al6400.com\/bpic\/taxrefundscam2.gif\" \/><\/p>\n<p>That is usually the easiest sign that you are being tricked.  Of course, it is better to just delete these types of e-mails.  Just be extra careful.<\/p>\n<p><!--adsense--><\/p>\n","protected":false},"excerpt":{"rendered":"<p>It\u00e2\u20ac\u2122s about that time of year again where we all start to file our taxes with many of us hoping to get a refund. At the same time, this is when people begin to prey on the less technically savvy by stealing their personal inform or also known as phishing scams. I just received this [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":12142,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_newsletter_tier_id":0,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[6],"tags":[683,682,681,679,680],"class_list":["post-630","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-money-making-scams","tag-identity-theft","tag-online-safety","tag-personal-information","tag-phishing-scams","tag-tax-refund-scams"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/www.al6400.com\/blog\/wp-content\/uploads\/2015\/01\/HNCK3323-1300x866.jpg","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6VnHC-aa","_links":{"self":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts\/630","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/comments?post=630"}],"version-history":[{"count":0,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts\/630\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/media\/12142"}],"wp:attachment":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/media?parent=630"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/categories?post=630"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/tags?post=630"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}