The FBI Internet Crime Complaint Center (IC3) issued a public service announcement regarding a significant increase in IRS-themed smishing campaigns.
Alert Number I-100422-PSA states, “Beginning in the fall of 2020, IRS’s Online Fraud Detection & Prevention (OFDP), which monitors [email protected], observed an increase in reports of SMS/text phishing (smishing) requesting taxpayer personal and financial information. These smishing campaigns continued through the pandemic. In recent months and weeks, IRS-themed smishing has increased exponentially. The FBI Internet Crime Complaint Center (IC3) in collaboration with the Treasury Inspector General for Tax Administration (TIGTA), warn the public of ongoing smishing campaigns.”
It provided an example of smishing messages that have been reported to the IRS: “IRS.gov You have received tax relief in disaster situations Status Amount of $303,40 is available to claim. IR-2022-156, Saturday 17 September. September is National Preparedness Month: IRS urges everyone to update and secure their records to prepare now for natural disasters. Submit Application & Complete Registration From here. hxxp://lubinaf[.]me/?irs-deducted-taxes-record=[REMOVED]”
It stated large-scale smishing campaigns have delivered hundreds, thousands or even hundreds of thousands of IRS-themed SMS/text messages in hours or a few days.
The public is advised to report these scams.
To send SMS/text scams to the IRS:
- Send an email to [email protected].
- Copy the Caller ID number (or the email address).
- Paste the number (or email address) into the email.
- Press and hold the SMS/text message and select Copy.
- Paste the copied text message into the email.
- If possible, include the exact date, time, time zone and the telephone number that received the message.
- Send the email to [email protected].
It noted that screenshots can be sent in email, but the actual text is preferred. It further noted that [email protected] only processes IRS, Treasury and/or tax-related online scams.
To file with IC3:
- Go to www.ic3.gov, and click on “File a Complaint.”
- Copy and paste the fraudulent message within the complaint description field. Include if the link was clicked or not and any other information relevant to the SMS/text scam.
- Be sure to include the phone number (or email address) that sent the SMS/text scam in addition to the exact date, time, time zone, and the that received the text message.