{"id":1225,"date":"2008-01-24T15:04:45","date_gmt":"2008-01-24T21:04:45","guid":{"rendered":"http:\/\/www.sequence-inc.com\/fraudfiles\/2008\/01\/24\/scam-email-thats-not-really-from-the-irs\/"},"modified":"2010-06-12T22:42:59","modified_gmt":"2010-06-13T04:42:59","slug":"scam-email-thats-not-really-from-the-irs","status":"publish","type":"post","link":"https:\/\/www.sequenceinc.com\/fraudfiles\/scam-email-thats-not-really-from-the-irs\/","title":{"rendered":"Scam email that’s not really from the IRS"},"content":{"rendered":"

Oh how I would love the free money this email is seeming to offer, but alas it was not meant to be.<\/p>\n

<\/a><\/p>\n

\"irs.gif\"<\/a><\/p>\n

<\/p>\n

The “click here” link actually goes to : http:\/\/cards.upstream.ru\/img\/1\/t\/search.php… which is of course a site set up to spoof the IRS site quite nicely. (Click on it to see it full size)<\/p>\n

<\/a><\/p>\n

\"irs2.gif\"<\/a><\/p>\n

And the “Tax Refund Online Form” goes to a site in Russia (I’m shocked!) The site is: http:\/\/form-a.ru\/dat\/fil\/database\/www.irs.gov\/irfofgetstatus.htm. It leads you through a few official-sounding steps. Of course, the last one ends with social security number, credit card number, expiration date, code on the back of the credit card, pin number, and email address.<\/p>\n

And after you hit “Submit” it takes you to the official IRS website. So if you weren’t paying attention to the web address and only looked after you were done, you’d be none the wiser.
\n<\/a> <\/a> <\/a><\/a><\/a> <\/a><\/a> <\/a> <\/a> <\/a> <\/a> <\/a> <\/a><\/a><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Oh how I would love the free money this email is seeming to offer, but alas it was not meant to be.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[5],"tags":[],"class_list":["post-1225","post","type-post","status-publish","format-standard","hentry","category-fraud-news-stories"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p6Z0e-jL","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.sequenceinc.com\/fraudfiles\/wp-json\/wp\/v2\/posts\/1225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.sequenceinc.com\/fraudfiles\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.sequenceinc.com\/fraudfiles\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.sequenceinc.com\/fraudfiles\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.sequenceinc.com\/fraudfiles\/wp-json\/wp\/v2\/comments?post=1225"}],"version-history":[{"count":0,"href":"https:\/\/www.sequenceinc.com\/fraudfiles\/wp-json\/wp\/v2\/posts\/1225\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.sequenceinc.com\/fraudfiles\/wp-json\/wp\/v2\/media?parent=1225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.sequenceinc.com\/fraudfiles\/wp-json\/wp\/v2\/categories?post=1225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.sequenceinc.com\/fraudfiles\/wp-json\/wp\/v2\/tags?post=1225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}