Back to Phishing Emails

⚠ Verified Phishing Email

Do not click any links in this email. Do not call any phone numbers listed. Report it to your email provider as phishing.

Why this subject line is flagged

TitanAlert lists this as a verified IRS / Tax Refund Scam phishing pattern. Criminals reuse subject lines like this to trick people into clicking links or handing over login details. A common hook in similar messages: Click a link to update your tax account information, leading to credential harvesting. Messages may spoof "IRS Online Services <online@irs.service.com>" — the visible sender can be faked. Do not use links or phone numbers from the email. Forward the message to your provider as phishing, and report fraud at reportfraud.ftc.gov.

"Action Required: Your Tax Account"

Phishing Email Subject Line

Spoofed Sender

IRS Online Services <online@irs.service.com>

Scam Category

IRS / Tax Refund Scam

Typical Call to Action

Click a link to update your tax account information, leading to credential harvesting.

What To Do

  1. 1.Do not click any links or call any numbers in the email.
  2. 2.Mark the email as phishing/spam in your email client.
  3. 3.Forward phishing emails to reportphishing@apwg.org.
  4. 4.Report to the FTC at reportfraud.ftc.gov.
  5. 5.If you clicked a link, change your passwords and monitor your accounts.