Each year the IRS publishes the top dozen tax scams it encounters over the prior year. One of them that makes an all-too-common appearance on their list is the phishing scam.
Phishing requires bait. Phishing is the act of creating a fake e-mail or website that looks like the real thing. This “bait” is then used to bring you into the scam by asking for private information. This includes your name, address, or phone number. It could also include potentially dangerous ID theft information like your Social Security number, a credit card number or banking information. The bait often looks very real, just like correspondence from the IRS or the IRS web site.
How to avoid the lure. How do you know the phishing is fake? Here are some tips.
- The IRS never initiates contact via email. If you get an unsolicited e-mail from the IRS requesting a response, do not reply! Instead forward the email to phishing@irs.gov.
- Never click or download. Perhaps even more important, never click on a link or open a file on a suspicious email. This is true even if the email comes from someone you know. Too often, phishing comes from someone impersonating someone you know.
- Know the web site. This includes the appearance, but more importantly the address. The valid address for the IRS is www.irs.gov. For Social Security, the address is www.ssa.gov.
- They may already have info about you. Good phishers already have parts of your identity, but just because they know things like your middle name and birth date does not make them legitimate.
- Phishing over the phone. Phishing can also take place over the phone. If you receive an unsolicited phone call, get the person’s name, ID, and phone number, then hang up. Next, go to the IRS (or vendor) web site, find the correct phone number, and call them back using this phone number. By initiating the contact on your side, you’ll know that you’re speaking to a legitimate person or organization.
- Don’t forget social media. Phishing can also happen via social media and texting. Virtually every digital resource has the potential to be used as a tool for theft.
What do phishers do? When the phishers have your information, they can file false tax returns requesting refunds, steal bank information, set up fake credit cards, establish false IDs, plus much more. Remember, if it smells like a phish, it probably is.
Andrea L. Blackwelder, CFP®, ChFC, CDFA® and Joseph D. Clemens, CFP®, EA are the founders and partners of Wisdom Wealth Strategies. Their shared passion is simple: to bring financial empowerment, understanding, and peace-of mind to people who wish to improve their financial future, build wealth for their families, and achieve financial independence. Click here to find out more about how you can work with the Denver Financial Advisors at Wisdom Wealth Strategies.