Phishing e-mail purports to be from IRS

Computerworld - The Internal Revenue Service today confirmed that an e-mail purporting to be from the IRS is part of a scam designed to trick users into revealing their personal information, including Social Security and credit card numbers.
The subject line of the e-mail, which was received by a Computerworld reporter, reads "Refund Notice!" and claims to be from "refund@irs.gov."
A portion of the e-mail reads, "You filed your tax return and you're expecting a refund. You have just one question and you want the answer now -- Where's My Refund? Access this secure Web site to find out if the IRS received your return and whether your refund was processed and sent to you. New program enhancements allow you to begin a refund trace online if you have not received your check within 28 days from the original IRS mailing date."
The e-mail goes on to ask for the recipient's name, Social Security and credit card information.
IRS spokesman Eric Smith said the scam is a variation of a separate ruse that surfaced last November. At the time, the IRS said the scheme was an attempt to trick the e-mail recipients into disclosing their personal and financial data, a practice called phishing. The IRS also said it does not ask for personally identifying or financial information via unsolicited e-mail.
"There's a totally legitimate way to check on your refund, and it costs you nothing," Smith said. "Just go to the IRS Web site and click on 'Where's My Refund?' Alternatively, taxpayers can call toll-free 1-800-829-1954."

Read more about Security in Computerworld's Security Topic Center.