Story image

120 reports in 12 hours: Kiwis hit by IRD tax refund scam

25 Aug 2017

Inland Revenue has issued an urgent warning about a tax scam that has caught many people off guard today.

The agency has received about 120 calls in the last 12 hours alone about the scam, which purports to be from Inland Revenue.

According to a statement from Inland Revenue, the email and attached form look ‘very convincing’.

The phishing scam’s sender address “appears as “Inland Revenue Department” but is actually sent from IRDxxxxx@s1.nzr.review. The address is false, but looks convincing to the layperson’s eye,” a statement from Inland Revenue says.

“A form comes as an attachment called TaxReturn.HTM. Again it looks convincing but is fake and designed to collect personal and credit card data,” the statement continues.

Inland Revenue strongly warns recipients not to open the attachment.

If you have clicked on the form and submitted any personal or credit card data please contact your bank immediately.  We also recommend you contact IDcare (http://www.idcare.org or phone 0800 201 415).

People can also notify Inland Revenue at phishing@ird.govt.nz

The content of the phishing email is below:

From: "Inland Revenue Department" <IRDny621@s1.nzr.review>
Date: 24 August 2017 at 17:41:31 GMT-6
To: 
Subject: IRD Refund Status (IRD-1G993)
Inland Revenue Department (IRD)
25-August-2017
As you were informed, we have determined that you should receive a tax refund. We have tried to process your refund however, the transaction has not been authorized. Possible reasons are:
- Your financial information has been changed or updated;
- Error with your personal information (e.g. misspelled name or address).

To receive your tax refund, please follow next steps:
- Save the attached tax return form and open it in a web browser (e.g. Safari, Firefox or Chrome).
- Once opened, you will be provided with the steps to complete and submit your tax return form.
Please allow up to 28 days for your refund to be processed. In the meantime, if your financial details are changed, please resubmit the form. If you can't download, open or submit the form, please try using a different browser.

Andrew Allen
Inland Revenue Department
Message ID: IRD029
This mailbox is not monitored and you will not receive a response before to submit the form.
To Unsubscribe from future notifications, reply to this email with Unsubscribe in the subject line.

New threat rears its head in new malware report
Check Point’s researchers view Speakup as a significant threat, as it can be used to download and spread any malware.
Oracle updates enterprise blockchain platform
Oracle’s enterprise blockchain has been updated to include more capabilities to enhance development, integration, and deployment of customers’ new blockchain applications.
Used device market held back by lack of data security regulations
Mobile device users are sceptical about trading in their old device because they are concerned that data on those devices may be accessed or compromised after they hand it over.
Gartner names ExtraHop leader in network performance monitoring
ExtraHop provides enterprise cyber analytics that deliver security and performance from the inside out.
Symantec acquires zero trust innovator Luminate Security
Luminate’s Secure Access Cloud is supposedly natively constructed for a cloud-oriented, perimeter-less world.
Palo Alto releases new, feature-rich firewall
Palo Alto is calling it the ‘fastest-ever next-generation firewall’ with integrated cloud-based DNS Security service to stop attacks.
The right to be forgotten online could soon be forgotten
Despite bolstering free speech and access to information, the internet can be a double-edged sword, because that access to information goes both ways.
Opinion: 4 Ransomware trends to watch in 2019
Recorded Future's Allan Liska looks at the past big ransomware attacks thus far to predict what's coming this year.