Buzz
Receiving a text from the ‘IRS’ threatening legal action and requesting your personal data is alarming, but it's important not to panic. The Internal Revenue Service recently alerted the public about a growing wave of “smishing” scams designed to steal sensitive personal and financial details. The IRS has identified numerous fraudulent domains this year, with cases surging dramatically in recent weeks.
“Over the past few months, we have seen multiple widespread smishing operations targeting the public, with thousands, even hundreds of thousands, of IRS-themed messages being sent in mere hours or days, far surpassing previous activity levels,” said IRS Commissioner Chuck Rettig in a recent press release.
What exactly are “smishing scams”?
Smishing refers to the deceptive practice of using text messages that appear to come from legitimate companies or organizations in an attempt to trick individuals into disclosing personal information.
Some sophisticated tactics involve sending an alphanumeric ‘verification code’ to your phone, asking you to share or recite it back over text or phone call. Once scammers obtain this code, they gain full access to your data and accounts. Never share such codes with unverified sources.
How to spot fraudulent IRS text messages
The key takeaway is that the IRS will never reach out to you via text or email asking for your personal details, financial information, or account numbers. They always begin communication through official postal mail.
Fraudulent messages often claim to be from the IRS, offering services like fake COVID relief, tax credits, or assistance with setting up accounts. If you’re prompted to enter personal information on a link, even with an offer in return, that’s a strong indication of a scam.
What actions to take if you receive one of these fraudulent texts
A simple rule to follow when unsure about sharing sensitive data via phone, text, or online is to contact the official number of the organization in question. Verify if the request for your information is legitimate. If they have no record of requesting it, you’re likely dealing with a smishing scam.
The next step is to report the number to [email protected]. This helps the IRS monitor new scam tactics and informs service providers who can take necessary action to block fraudulent domains and protect others from becoming victims.
The following are the official steps from the IRS to report smishing incidents:
Send an email to [email protected].
Copy the caller ID number (or email address).
Paste the number (or email address) into the email.
Press and hold the SMS/text message and choose “copy.”
Paste the message into the email.
If possible, provide the exact date, time, time zone, and phone number that received the message.
Send the email to [email protected].
