IRS Scams Surge: Your Mobile Device Emerges as Prime Target, McAfee Uncovers

IRS Scams Surge: Your Mobile Device Emerges as Prime Target, McAfee Uncovers

In the looming shadow of Tax Day, as countless taxpayers scramble to finalize their returns in the eleventh hour, a concerning trend has emerged. McAfee Labs’ research reveals a significant uptick in sophisticated IRS scams, preying on the anxieties of taxpayers during this high-pressure period. With a majority of taxpayers rushing to file their taxes between mid-March and April 15, scammers have found the perfect window to execute their malicious schemes.

Last year, McAfee’s data showed a startling increase in the number of malicious tax scam URLs. From February 1, where such URLs accounted for 2.9% of all activity, to February 28, this figure nearly quadrupled, soaring to 10.5%, with the most significant spike occurring towards the end of the month. This upward trajectory signals a clear and present danger as tax season reaches its peak.

One of the most alarming aspects of these scams is the overwhelming preference for mobile attacks. In 2024, a staggering 76% of all tax scam activity targeted mobile users, primarily through text messages. Scammers frequently employ URL shorteners, such as bit.ly and goo.gl, to mask the true nature of their fraudulent links. These shortened URLs may seem convenient, but they also serve to deceive unsuspecting victims, making it difficult to discern whether a link leads to a legitimate or malicious site.

Moreover, scammers are becoming increasingly coordinated in their efforts. In 2024, a single campaign was responsible for 17.3% of all tax-related blocked URLs. These campaigns often utilize fake IRS-style links, such as “irs.gov.tax-helping[.]com,” to trick taxpayers into divulging their personal and financial information.

Scammers don’t limit their deception to posing as the IRS. They also masquerade as tax preparation services and tax software companies, luring taxpayers with promises of quick refunds and effortless filing solutions. These enticing offers are often nothing more than fronts for scams designed to steal sensitive information.

The Perils of Tax Scams

Tax season provides scammers with a fertile hunting ground, as taxpayers are more likely to be on the lookout for tax-related communications. This heightened vigilance can paradoxically make them more vulnerable, as they may be less skeptical of messages that appear to be related to their taxes.

Scammers have several motives for their fraudulent activities:

1. Account Information Theft: By hijacking account and financial information associated with credit cards and banks, scammers can siphon funds and make unauthorized purchases using the victim’s card.
2. False Tax Return Filing: Scammers may file false tax returns in a victim’s name, claiming their refunds and leaving the victim in financial distress and facing the daunting task of resolving a fraud claim.
3. Identity Theft: Stolen personal information can be used to open new credit lines and accounts in the victim’s name, leading to significant financial and reputational damage.
4. Data Resale: In some cases, scammers may choose to profit from their victims by selling stolen information on the dark web. This allows other criminals to use the information for their own nefarious purposes.

The consequences of tax scams can be far-reaching and devastating. A stolen Social Security Number, in particular, can open the door to various forms of identity theft, including imposter fraud, insurance fraud, and employment fraud. These follow-on attacks can have long-lasting effects on a victim’s finances and reputation, often taking months or even years to fully recover from.

The Mechanics of Tax Scams

Tax scams typically follow a two-step process. First, scammers send phony messages posing as the IRS, a tax preparation service, or a tax software company. These messages can be delivered via email, social media direct messages, or even paid search results. However, text messages are the preferred method of attack, given the prevalence of mobile devices and the ease with which scammers can use URL shorteners to disguise their links.

In some instances, scammers may attempt to deceive taxpayers by incorporating “irs.gov” into a malicious web address. For example, a link may appear to be from the IRS but actually lead to a scam site with a domain like “entes-tax[dot]com.” The text of these messages is often designed to create a sense of urgency, such as claiming that a refund is on hold or threatening legal consequences for non-payment. It’s important to note that the IRS never uses such tactics to resolve tax issues.

Once a victim clicks on a link in one of these messages, they are directed to a fake IRS website that closely mimics the appearance of the official site. These copycat sites are designed to look legitimate, using URLs that are similar to the real IRS website and replicating the layout and design of the official site. Unsuspecting taxpayers may be tricked into providing their personal and financial information, believing they are dealing with a legitimate entity.

The same modus operandi applies to scammers posing as tax preparation services and tax software companies. While the texts and websites may vary in appearance, the underlying goal remains the same: to collect sensitive personal and financial information.

Shielding Yourself from Tax Scams

Despite the sophistication of these scams, there are several steps you can take to protect yourself during tax season:

1. Exercise Caution with IRS Communications: Be skeptical of emails and phone calls claiming to be from the IRS. The IRS typically communicates with taxpayers via physical mail, not email or text. Refer to the IRS’s official list of contact methods for more information.
2. Guard Your Personal Information: Never disclose personal information over the phone, as the IRS will never call to request such information. Additionally, be wary of any government agency demanding payment via money order, gift card, or online payment platform other than IRS.gov.
3. Verify Sources Directly: Instead of clicking on links in emails or texts, go directly to the official websites of the IRS, tax preparation services, or tax software companies. This helps ensure that you are dealing with legitimate entities and reduces the risk of falling victim to a phishing scam.
4. Leverage Online Protection Tools: McAfee+ plans offer features that can help you identify and avoid scam sites and texts. Web Protection and Online Account Cleanup, for example, can alert you if a link is potentially dangerous and help secure your online accounts. These tools will also block access to malicious sites if you accidentally click on a bad link.
5. Implement Preventive Measures: Regularly check your credit report for any signs of unusual activity, maintain strict privacy settings on your social media accounts, and use strong, unique passwords for all your accounts. McAfee+ plans provide comprehensive features to help you manage these aspects of your digital security in one convenient place.
6. Remove Personal Information from Data Broker Sites: Scammers often obtain contact information from data broker sites, which buy, collect, and sell personal information from various public and private sources. McAfee’s Personal Data Cleanup feature scans some of the riskiest data broker sites and identifies which ones are selling your personal information, allowing you to take steps to remove it.
7. File Your Taxes Promptly: One of the most effective ways to prevent scammers from claiming your refund is to file your taxes as soon as possible. In some cases, taxpayers may only discover that they have been scammed when they attempt to file their return and find that it has already been filed in their name.

By staying informed and taking proactive steps to protect yourself, you can significantly reduce the risk of falling victim to IRS scams during tax season. Remember, vigilance is key in the fight against cybercrime.

McAfee+ – Your Digital Life’s Shield

McAfee+ offers comprehensive identity theft protection and privacy features designed to safeguard your digital life. Download McAfee+ today to enjoy peace of mind knowing that your personal information is secure.

Stay informed about the latest threats and security tips by following McAfee on social media platforms such as Facebook, Twitter, Instagram, LinkedIn, YouTube, and RSS.

By working together and spreading awareness about these scams, we can help protect ourselves and our communities from the devastating impact of IRS scams. Let’s make this tax season a safe one.