Story image

IRD warns against phishing as personal tax changes kick in

30 Jan 2019

Inland Revenue is advising customers to always use its secure online services to update bank details and avoid scammers who target Kiwi taxpayers.

Automatic tax refunds are coming this year and in the last month, two e-mail scams surfaced asking taxpayers to fill in a form to receive a refund owed to them.

Last year, the IRD announced that it would the biggest change to individual tax in nearly 20 years.

About 750,000 tax refunds will be automatically generated for wage and salary earners who don’t usually apply to get their tax back.

Inland Revenue commissioner Naomi Ferguson says, “Put simply, IR will now look at the information we have about an individual and if we’re confident we have all their information, we’ll calculate and finalise their tax position for the year and generate an automatic refund - so there’s no need for a PTS, making it a very simple process for wage and salary earners.

IRD spokesperson Bernadette Newman says updated information is important but it should be done only through the department’s secure online platform, myIR.

“We do need that updated information ahead of major changes to the tax system scheduled from April. Having the right details means we can put refunds directly into customers bank accounts.

Newman says, “For security and safety, it’s vital that’s done through our secure online channel. Anytime, anywhere – you can get it done with myIR.

“It makes checking and updating your information simpler, faster and more secure and avoids scammers trying to rip off your refund.

“Once you’re registered you can update your details, check if you’re due a tax refund, look at your student loan details or working for Families tax credit details and review your KiwiSaver contributions.

“Business customers can manage GST, make payments by direct debit or using a credit/debit card and send attachments using secure e-mail.

“You can set myIR up online – you just need your IRD number to register.

Newman adds, “There also the option to use Inland Revenue’s voice ID service which uses your unique voiceprint to quickly and securely confirm your identity.

“Once enrolled, you can change your details and reset your password for myIR. You'll no longer need to answer questions to prove who you are."

“Inland Revenue is serious about protecting user information and we use different measures and technologies to make sure only you can access your account,” says Bernadette Newman.

“Use our secure online services to give us the information we need to give you a refund. That way you, and not the scammers, will get the money.”

Taxpayers who receive a text scam message or a fraudulent call are advised to email IRD at phishing@ird.govt.nz

Safety solutions startup wins ‘radical generosity’ funding
Guardian Angel Security was one of five New Zealand businesses selected by 500 women (SheEO Activators) who contributed $1100 each.
Industrial control component vulnerabilities up 30%
Positive Technologies says exploitation of these vulnerabilities could disturb operations by disrupting command transfer between components.
McAfee announces Google Cloud Platform support
McAfee MVISION Cloud now integrates with GCP Cloud SCC to help security professionals gain visibility and control over their cloud resources.
Why AI and behaviour analytics should be essential to enterprises
Cyber threats continue to increase in number and severity, prompting cybersecurity experts to seek new ways to stop malicious actors.
Scammers targeting more countries in sextortion scam - ESET
The attacker in the email claims they have hacked the intended victim's device, and have recorded the person while watching pornographic content.
Cryptojacking and failure to patch still major threats - Ixia
Compromised enterprise networks from unpatched vulnerabilities and bad security hygiene continued to be fertile ground for hackers in 2018.
Princeton study wants to know if you have a smart home - or a spy home
The IoT research team at Princeton University wants to know how your IoT devices send and receive data not only to each other, but also to any other third parties that may be involved.
Organisations not testing incident response plans – IBM Security
Failure to test can leave organisations less prepared to effectively manage the complex processes and coordination that must take place in the wake of an attack.