Instead of finding One-Eyed Willy's treasure at the end of an IRS-spoofed email, victims are tricked into clicking malicious links and giving up their treasure.
The IRS recently issued warnings about new email scams where attachers send unsolicited emails to taxpayers from fake IRS email addresses. The email subject line may vary, but recent examples use the phrase "Automatic Income Tax Reminder" or "Electronic Tax Return Reminder."
The emails contain a link to a spoofed IRS.gov website that displays fake details about the targeted recipient’s tax refund, return, or account. The emails instruct the victim to access their refund information by entering a "temporary password" or "one-time password" provided on the fake website. By entering the password, the victim downloads malware that can enable the attackers to take control of the affected system or obtain sensitive information.
Remember: the IRS does not send unsolicited emails and never emails taxpayers about the status of refunds. Don't fall for their booby traps!