{"id":9348,"date":"2017-06-29T23:40:21","date_gmt":"2017-06-30T07:40:21","guid":{"rendered":"http:\/\/al6400.com\/blog\/?p=9348"},"modified":"2017-06-29T23:40:21","modified_gmt":"2017-06-30T07:40:21","slug":"canada-revenue-agency-tax-return-report-scam","status":"publish","type":"post","link":"https:\/\/www.al6400.com\/blog\/canada-revenue-agency-tax-return-report-scam\/","title":{"rendered":"Canada Revenue Agency Tax Return Report Scam"},"content":{"rendered":"<p>At first when I read this I thought it could potentially be legitimate.  However, knowing that phishing scams and such are very prevalent that of course made me skeptical.  With this e-mail they send you a message stating there is an error with your tax return and that you should respond.  They also attach a Microsoft Word document which is fishy enough as it is.  Here is what the message looks like:<br \/>\n_____________________<br \/>\nReturn-Path: <tax_no_reply -norefund@cra-arc.gc.ca><br \/>\nReceived: (qmail 19977 invoked from network); 29 Jun 2017 11:43:41 -0000<br \/>\nReceived: from linux1.singaporedatacentre.com (singaporedatacentre.com [119.81.53.243])<br \/>\nReceived: from [184.75.209.164] (port=65425 helo=User)<br \/>\n\tby linux1.singaporedatacentre.com with esmtpa (Exim 4.87)<br \/>\n\t(envelope-from <\/tax_no_reply><tax_no_reply -norefund@cra-arc.gc.ca>)<br \/>\n\tid 1dQXpb-0007oC-ME; Thu, 29 Jun 2017 19:41:57 +0800<br \/>\nReply-To: <\/tax_no_reply><tax_no_reply -norefund@cra-arc.gc.ca><br \/>\nFrom: &#8220;Canada Revenue Agency&#8221;<\/tax_no_reply><tax_no_reply -norefund@cra-arc.gc.ca><br \/>\nSubject: [CRA: IMMEDIATE ATTENTION] Your 2016 Tax Report!!!<br \/>\nDate: Thu, 29 Jun 2017 12:41:52 +0100<br \/>\nMIME-Version: 1.0<br \/>\nContent-Type: multipart\/mixed;<br \/>\n\tboundary=&#8221;&#8212;-=_NextPart_000_00EC_01C2A9A6.723976C6&#8243;<br \/>\nX-Priority: 3<br \/>\nX-MSMail-Priority: Normal<br \/>\nX-Mailer: Microsoft Outlook Express 6.00.2600.0000<br \/>\nX-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000<br \/>\nX-linux1-MailScanner-Information: Please contact the ISP for more information<br \/>\nX-linux1-MailScanner-ID: 1dQXpb-0007oC-ME<br \/>\nX-linux1-MailScanner-SpamCheck:<br \/>\nX-linux1-MailScanner-From: tax_no_reply-norefund@cra-arc.gc.ca<br \/>\nX-AntiAbuse: This header was added to track abuse, please include it with any abuse report<br \/>\nX-AntiAbuse: Primary Hostname &#8211; linux1.singaporedatacentre.com<br \/>\nX-AntiAbuse: Original Domain &#8211; al6400.net<br \/>\nX-AntiAbuse: Originator\/Caller UID\/GID &#8211; [47 12] \/ [47 12]<br \/>\nX-AntiAbuse: Sender Address Domain &#8211; cra-arc.gc.ca<br \/>\nX-Get-Message-Sender-Via: linux1.singaporedatacentre.com: authenticated_id: cindy@solemate.com.sg<br \/>\nX-Authenticated-Sender: linux1.singaporedatacentre.com: cindy@solemate.com.sg<\/p>\n<p>Good Day,<\/p>\n<p>Attached, is a copy of your 2016 Tax Return Report which was recently filed and approved. Our system has generated an error after processing it, which requires your immediate attention.<\/p>\n<p>Kindly download the attached document to view full report and reason for this error. You need to respond to this within the next 24-72 working hours.<\/p>\n<p>Thank you<\/p>\n<p>Canada Revenue Agency<br \/>\n875 Heron Road<br \/>\nOttawa ON  K1A 1B1<br \/>\nhttp:\/\/www.cra-arc.gc.ca\/<br \/>\n__________________________<\/p>\n<p>Basically, just delete this message and don\u2019t give them any of your information.  Especially don\u2019t open the attachment even for curiosity.<\/tax_no_reply><\/p>\n","protected":false},"excerpt":{"rendered":"<p>At first when I read this I thought it could potentially be legitimate. However, knowing that phishing scams and such are very prevalent that of course made me skeptical. With this e-mail they send you a message stating there is an error with your tax return and that you should respond. They also attach a [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":9349,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_newsletter_tier_id":0,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[6],"tags":[6234,6744,1339,6745],"class_list":["post-9348","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-money-making-scams","tag-canada-revenue","tag-canadfa-revenue-agency","tag-phishing-scam","tag-tax-scam"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/www.al6400.com\/blog\/wp-content\/uploads\/2017\/06\/taxscam.jpg","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6VnHC-2qM","_links":{"self":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts\/9348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/comments?post=9348"}],"version-history":[{"count":2,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts\/9348\/revisions"}],"predecessor-version":[{"id":9351,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/posts\/9348\/revisions\/9351"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/media\/9349"}],"wp:attachment":[{"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/media?parent=9348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/categories?post=9348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.al6400.com\/blog\/wp-json\/wp\/v2\/tags?post=9348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}