Story image

Inland Revenue says watch out for tax refund scams

07 Jan 19

Inland Revenue is warning New Zealanders to be vigilant about any ‘tax refund’ emails they receive that appear to look genuine.

Inland Revenue, which is undertaking a ‘Changing for you’ campaign, recently sent out genuine emails to more than two million New Zealanders about proposed tax changes regarding automatic tax assessments and other changes.

However it didn’t take long for scammers to pick up the scent and take advantage of the campaign for their own benefit.

Inland Revenue customer segment leader Bernadette Newman says scammers are sending convincing-looking emails, but there are key details that show that it’s a fake.

“The e-mail asks you to complete the steps below to release money owed to you. There’s a link to fill in a form with advice to ‘just fill it in and get your returns in order now’,” says Newman.

One of the emails, which copies genuine Inland Revenue and New Zealand Government logos, appears to come from provider@ird-taxingreturn.co.nz – which is not Inland Revenue’s email address.

“When you receive an e-mail like this, purporting to come from IRD, don’t click on it – but use your mouse to hover the web address and make sure it’s for a real Inland Revenue website.”
Inland Revenue’s ‘Changing for you’ campaign details how automatic tax refunds can be issued to eligible customers if Inland Revenue holds customers’ up-to-date bank account information. This can be updated through myIR, the secure online portal, which is password protected."

Inland Revenue will be sending more emails about the campaign in the new year.

“You will know you’re in safe hands if you’ve been directed to myIR where a valid log-in is required,” says Newman.

“Unfortunately, scammers and phishers will try to take advantage of the volume of e-mail we’re sending and try to access bank accounts and steal people’s money. It’s important to know what a fraudulent e-mail looks like. 

“You don’t want your summer holidays ruined by a scammer so take the time to check your e-mail and delete the fakes.”

Inland Revenue will never:

• email you with the amount of your refund (only within myIR) or send you an e-mail, knock on your door or phone you promising a tax refund.

• ask you to pay money to release a tax refund. 

• send you an email with a hyperlink to a webpage that asks you to submit your personal information. 

• demand payments through NZ Post or a gift card.

If you receive a text scam message or a fraudulent call, email phishing@ird.govt.nz.

Hillstone CTO's 2019 security predictions
Hillstone Networks CTO Tim Liu shares what key developments could be expected in the areas of security compliance, cloud, security, AI and IoT.
Can it be trusted? Huawei’s founder speaks out
Ren Zhengfei spoke candidly in a recent media roundtable about security, 5G, his daughter’s detainment, the USA, and the West’s perception of Huawei.
Oracle Java Card update boosts security for IoT devices
"Java Card 3.1 is very significant to the Internet of Things, bringing interoperability, security and flexibility to a fast-growing market currently lacking high-security and flexible edge security solutions."
Updated: Chch crypto-exchange Cryptopia suffers breach
Cryptopia has reportedly experienced a security breach that has taken the entire platform offline – and resulted in ‘significant losses’.
Sophos hires ex-McAfee SVP Gavin Struther
After 16 years as the APAC senior vice president and president for McAfee, Struthers is now heading the APJ arm of Sophos.
Security platform provider Deep Instinct expands local presence
The company has made two A/NZ specific leadership hires and formed several partnerships with organisations in the region.
Half of companies unable to detect IoT device breaches
A Gemalto study also shows that the of blockchain technology to help secure IoT data, services and devices has doubled in a year.
Stepping up to sell security services in A/NZ
WatchGuard Technologies A/NZ regional director gives his top tips on how to make a move into the increasingly lucrative cybersecurity services market.