Skip to main content

Scammers Target .edu Email Addresses in New Round of Tax Fraud

The IRS has reported a new round of email scams that target taxpayers with a .edu email address. The scam messages display the IRS logo, and subject lines include titles like “Tax Refund Payment” and “Recalculation of your tax refund Payment.” These phony emails include a link to a phishing page requesting taxpayer information, including:

  • Social Security Number
  • First and Last Name
  • Date of Birth
  • Prior Year Annual Gross Income (AGI)
  • Driver’s License Number
  • Current Address
  • City
  • State/U.S. Territory
  • ZIP Code/Postal Code
  • Electronic Filing PIN

Universities and educational organizations all over the country are reporting being targeted in these scams. Northwestern IT actively works to protect the Northwestern community from these types of threats. Still, everyone has a part to play in keeping their information safe. Stay vigilant!  Never respond to these messages and do not click on any of their links. If the requested information is given, scammers will have everything they need to commit tax fraud. Anyone receiving these emails should immediately report them to the IRS by saving a full copy of the email and sending it to phishing@irs.gov.

If you have become victim to this fraud, file a Form 14039 (https://www.irs.gov/pub/irs-pdf/f14039.pdf)  to report yourself as a possible identity theft victim.

You can exercise one preventative option by opting into the “Identity Protection PIN” program (https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin) offered by the IRS. It helps prevent identity thieves from filing in your name.

Be sure to check out the Recognizing Phishing Attempts page for other tips and guidance on protecting yourself against these and other scams.

As always, don’t trust emails you aren’t expecting, and don’t click on links in unexpected emails. Never provide your social security number or other personal information online. Remember, the IRS will never email you asking for this information; they have it already.

Leave a Comment