IRD warns against latest sophisticated email scam

A sophisticated email scam is doing the rounds using Inland Revenue branding to trick people into giving up their credit card details.

The email usually claims the recipient is due a large tax refund and then asks them to click on a link to another website where their money can supposedly be claimed.

The email looks very convincing but there are a couple of important details that give their game away, says Inland Revenue chief information security officer Doug Hammond.

“Firstly look where the email is from. If it doesn’t come from an address that ends with ird.govt.nz then be very suspicious,” says Hammond, in a statement.

“Secondly, look at the link where they are trying to direct people to claim the refund. Hover over the link with your mouse and make sure the web address is for a real Inland Revenue website. Don’t click on it.

“We send out emails all the time but customers should be aware what a fraudulent one looks like.”

He shares an example of the scam email:

Hammond says this particular scam has been quite common lately and IRD has received around 700 notifications about it in the past week.

“The same scammers look to be making multiple attempts to lure unsuspecting customers and have been using the same messaging sent from a number of email addresses,” says Hammond.

“We would never send anyone an email with a hyperlink to a webpage that asks you to submit your personal information so be vigilant about any correspondence with those instructions.”

He says anyone who receive an email but is unsure about it should contact Inland Revenue  at phishing@ird.govt.nz.

If you have clicked on the form and submitted any personal or credit card data, Hammond advises contacting your bank immediately and IDcare (phone 0800 201 415).

Get the latest on digital transformation: Sign up for  CIO newsletters for regular updates on CIO news, career tips, views and events. Follow CIO New Zealand on Twitter:@cio_nz