March 25, 2021

IRS-themed phish

This week there are at least two phishing campaigns impersonating the IRS that are targeting the UW community. If you see an email with the subject Your Payroll Direct Deposit or Recalculation of Your Tax Refund Payment, delete it.

In this case, there is no need to report these particular messages to our service center at help@uw.edu. Just delete them.

An example can be found below.

There may be other campaigns with similar subject lines that are also intended to harvest your credentials and spread malware. For other phishing campaigns, please continue to report them by forwarding the message as an attachment to help@uw.edu.

Resources

OIS

More info on IRS scams
https://ois.uw.edu/2021/02/25/irs-tax-season-scams/

Phishing Examples
https://ois.uw.edu/education/phishing-examples/

IT Connect

Forwarding Email as an Attachment:
https://itconnect.uw.edu/connect/email/resources/protecting-your-email/forwarding-email-as-an-attachment/

Protecting Your Email:
https://itconnect.uw.edu/connect/email/resources/protecting-your-email/

IRS

Phishing, Identity Theft and Scams
https://www.irs.gov/newsroom/phishing-identity-theft-and-scams
https://www.irs.gov/newsroom/irs-warns-university-students-and-staff-of-impersonation-email-scam

Example

Phishing Examples

More Articles