Scott Cooper World Scam
It has both an IRS emblem and an e-services emblem that links to a URL verified as a phishing site. The Publish site presents as an e-services registration page.
The scammers are attempting to exploit current IRS efforts to strengthen the e-services authentication process and its ongoing communications with tax professionals about their accounts. Scammers are trying to steal e-services usernames and passwords or even more personal information through a registration page.
If e-services users have clicked on the imitation logo and supplied their username and password, they should contact the e-services help desk to reset their account. If the same password is used for different accounts, they ought to be changed also. As an extra precaution, users must perform a profound security scan on their computers, reevaluate their safety controls and be alert to any other indications of identity theft or data compromise.
Tax professionals must always go directly to IRS.gov to access e-services, never click on any links provided in emails.
Tax professionals who get a suspicious email should send it as an attachment to [email protected] and then delete it. Recipients should not click on any links.
The scammer email tells recipients that information has been stolen from specific user accounts in 2015 from a state-sponsored actor. It says users are being asked to update their e-service account to guarantee protection of the information. It asks them to click on the login to access their account for the security update.
The IRS is in the process of updating e-services safety and has been in communication with tax professionals about upgrading their accounts.
The IRS, state tax agencies and tax industry partners working together through the Security Summit have an awareness campaign underway called Protect Your Clients; Protect Yourself. The target is to remind tax professionals that they increasingly are the targets of identity thieves seeking ever larger amounts of taxpayer information to file fraudulent tax returns.
Scott Cooper World recommends:
Always use powerful security software
Use encryption software to protect taxpayer data
Use strong passwords and change them frequently
Learn to recognize phishing emails Trying to steal info
Never click on hyperlinks or download attachments from suspicious emails
Beware of any communications claiming to be the IRS which are outside ordinary channels