Know It All Ziff Davis Enterprise
Advertisement
Advertisement
Wednesday, May 14, 2008 1:35 PM/EST

Rebate Phishing


UPDATE: The links are now broken and Firefox is identifying the sites as possible forgeries. That's a good thing, but you can count on the phishers to cast another line.

I wouldn't bother blogging this here...except for this.

So:

Here's a nasty little email phishing scam -- smarter than most, because it's keyed to something real: your tax rebate.

Over 130 million Americans will receive refunds as part of President Bush program to jumpstart the economy.

Our records indicate that you are qualified to receive the 2008 Economic Stimulus Refund.

The fastest and easiest way to receive your refund is by direct deposit to your checking/savings account.

Please click on the link and fill out the form and submit before May 16th, 2008 to ensure that your refund will be processed as soon as possible.

Submitting your form on May 16th, 2008 or later means that your refund will be delayed due to the volume of requests we anticipate for the Economic Stimulus Refund.

To access Economic Stimulus Refund, please click here.

© Copyright 2008, Internal Revenue Service U.S.A. All rights reserved.

The link takes you to an official-enough-looking website (if you don't look at the URL, which uses a Canadian domain, or note the email's sloppy punctuation and the confusion of "refund" and "rebate", etc.; the email is from "service@irs.gov") that asks for a bunch of sensitive info.

Many readers of this site make too much money to get a rebate, but that might not keep some of them from giving up their info. Don't.

TrackBack

TrackBack

http://blogs.cioinsight.com/cgi-bin/mte/mt-tb.cgi/13617

Comments (1)

Ian Kemmish :

If everyone who received a phishing email were to fill in the form with the personal details of a few of their favourite characters from fiction, it might dilute the crooks' database sufficiently to make life at least a bit more irritating for them.

If you had to try four or five IDs before you found one that worked (or the bank blocked your IP address), wouldn't you think about trying a different scam?

Post a Comment

 
 


Advertisement
Advertisement