Cybercriminals are getting ready to take advantage of people during tax season by using a variety of tactics to steal personal information and refunds. Scams such as AI-powered phishing emails, QR code schemes, and the sale of sensitive tax documents on the dark web are becoming more frequent.
Fake refunds, impersonations, and use of AI to scam users
As per a report by Check Point Research, over 1,30,000 tax scam cases were reported in the UK in the past year, with 58,000 involving fake tax rebate offers. Scammers are impersonating tax authorities and promising rebates, demanding tax detail updates, or even threatening arrest for tax evasion.Researchers at Check Point have identified multiple instances of tax-related phishing and malware. In one example, threat actors impersonated the IRS, using malicious PDFs with QR codes that led to credential-stealing websites.
The rise of AI chatbots has added a new dimension to the problem. These tools can generate convincing tax scam emails and even call scripts targeting elderly individuals.
Dark web marketplace for tax documents
On the dark web, hackers sell sensitive tax documents, such as legitimate W2 and 1040 forms, to unsuspecting individuals. These documents are sold for as much as $75 each, with some hackers offering bulk discounts or giveaways. Hackers are also selling access to bank accounts for refund deposits and remote desktop privileges to popular tax services, allowing them to file fraudulent refunds on behalf of the victims.
Staying Safe During Tax Season
To stay safe during tax season, it is advised to directly contact the tax agencies through mail and never initiate contact via email or phone. To identify phishing attempts, watch for unusual attachments, incorrect grammar or tone, and suspicious requests for sensitive information.
Do not reply, click links, or open attachments if you receive a suspicious email. Instead, report the email and delete it. Investing in anti-phishing solutions can provide comprehensive protection against these threats.
As the tax season progresses, staying informed and proactive about these evolving threats is important to protect your sensitive information and hard-earned refunds.
