Back to Phishing Emails

⚠ Verified Phishing Email

Do not click any links in this email. Do not call any phone numbers listed. Report it to your email provider as phishing.

Why this subject line is flagged

TitanAlert lists this as a verified IRS / Tax Refund Scam phishing pattern. Criminals reuse subject lines like this to trick people into clicking links or handing over login details. A common hook in similar messages: Open an attached HTML file which leads to a Microsoft email phishing page to steal credentials. Messages may spoof "Tax IRS 152 <taxirs152@irs-gov.net>" — the visible sender can be faked. Do not use links or phone numbers from the email. Forward the message to your provider as phishing, and report fraud at reportfraud.ftc.gov.

"IRS Notice of intent to seize (Levy) Your Property or rights to property"

Phishing Email Subject Line

Spoofed Sender

Tax IRS 152 <taxirs152@irs-gov.net>

Scam Category

IRS / Tax Refund Scam

Typical Call to Action

Open an attached HTML file which leads to a Microsoft email phishing page to steal credentials.

What To Do

  1. 1.Do not click any links or call any numbers in the email.
  2. 2.Mark the email as phishing/spam in your email client.
  3. 3.Forward phishing emails to reportphishing@apwg.org.
  4. 4.Report to the FTC at reportfraud.ftc.gov.
  5. 5.If you clicked a link, change your passwords and monitor your accounts.