The IRS warned tax professionals Wednesday that e-Services users face a new phishing scam designed to steal passwords and other data.
Scammers are using emails to try and trick tax professionals into “signing” a new e-Services user agreement, according to the IRS. The email claims to be from “e-Services Registration” and uses “Important Update about Your e-Services Account” in the subject line.
The email states, in part, “We are rolling out a new user agreement and all registered users must accept its revised terms to have access to e-Services and its products.”
Individuals are then asked to review and accept the agreement but it “takes them to a fake site instead,” the IRS said.
In its alert, the IRS says tax professionals should be aware that as “e-Services begins its move later this month to Secure Access authentication and its two-factor protections, cybercriminals likely will make last-ditch efforts to steal passwords and data prior to the transition.”
As the IRS has warned over the past few years, these sophisticated schemes are adaptive in nature and everyone should be cautious before clicking on a link or entering sensitive personal information.
For those who may have clicked onto this link, the IRS said to perform a deep scan with security software, contact IT/cybersecurity personnel and the IRS e-Help Desk.
— Check out IRS: Watch Out for ‘Tax-Savvy’ Phishing Scams Ahead of Oct. 15 on ThinkAdvisor.