Security News > 2021 > February > Scammers target US tax pros in ongoing IRS phishing attacks

The Internal Revenue Service has warned US tax professionals of identity thieves actively targeting them in a series of phishing attacks attempting to steal Electronic Filing Identification Numbers.
Scammers started this ongoing phishing campaign right before the US tax season with the end goal of stealing both client data and tax preparers' identities.
The phishing emails ask tax preparers to email copies of their "EFIN verification and Driver's license" as part of a bogus verification process.
"Tax professionals also should be aware of other common phishing scams that seek EFINs, Preparer Tax Identification Numbers or e-Services usernames and passwords," the IRS added.
"The thief may interact repeatedly with a tax professional and then send an email with an attachment that claims to be their tax information."
The IRS impersonation scam should also be reported to the Treasury Inspector General for Tax Administration for further investigation by the IRS Criminal Investigation division.
News URL
Related news
- Scammers file first — Get your IRS Identity Protection PIN now (source)
- Ransomware gangs pose as IT support in Microsoft Teams phishing attacks (source)
- Microsoft Teams phishing attack alerts coming to everyone next month (source)
- How to Prevent Phishing Attacks with Multi-Factor Authentication (source)
- Hacker pleads guilty to SIM swap attack on US SEC X account (source)
- US indicts 8Base ransomware operators for Phobos encryption attacks (source)
- Critical PostgreSQL bug tied to zero-day attack on US Treasury (source)
- Microsoft: Hackers steal emails in device code phishing attacks (source)
- Darktrace: 96% of Phishing Attacks in 2024 Exploited Trusted Domains Including SharePoint & Zoom Docs (source)
- Phishing attack hides JavaScript using invisible Unicode trick (source)