Tax professionals are the target of a new email scam looking to swipe tax software preparation credentials, according to the Internal Revenue Service.
The IRS and the Security Summit issued the warning about thieves trying to steal client data and tax preparers’ identities to file fraudulent returns for refunds.
The latest phishing email uses the IRS logo and a variety of subject lines such as, “Action Required: Your account has now been put on hold.” The IRS said it has seen similar bogus emails that claim to be from a “tax preparation application provider.” One variation offers an “unusual activity report” and a solution link for the recipient to restore their account.
“Scams continue to evolve, and this one is especially sinister since it threatens tax professional’s accounts,” said IRS Commissioner Chuck Rettig in a statement.
The scam emails send users to a website with logos of several tax prep software providers. Clicking on a logo opens a request for preparer account credentials. Do not respond or take any of the steps outlined in the email, the IRS warned.
Similar emails include malicious links or attachments that are set up to steal information or to download malware onto the tax professional’s computer. In this case, if recipients enter their credentials into the pop-up window, thieves can use the information to file phony returns.
The IRS said that an example of this bogus email, rife with random capitalization and spelling errors, states:
"Your account has now been put on hold
ALL preparers are required to apply security feature to their Tax Pro account towards 2021 Tax Returns processing.
You have failed to apply new update before expiry date
You are restore and update your acc|ount immediately.
Please Click Here to update your acc|ount now.
Important
Failure to update your account within the next 24hours will lead to you account being terminated and be barred from filing tax returns claims for 2021 tax season Your access will be restored once you have updated your details.
Sincerely,IRS.gov eServices"
Tax pros who clicked on one of the URLs and then entered their account information should contact their tax software preparation provider’s support hotline, the IRS said.
Tax professionals who get a scam email should save the email as a file and then send it as an attachment to
Both TIGTA and the IRS Criminal Investigation division are aware of this scam, the IRS said.
