Story image

120 reports in 12 hours: Kiwis hit by IRD tax refund scam

25 Aug 2017

Inland Revenue has issued an urgent warning about a tax scam that has caught many people off guard today.

The agency has received about 120 calls in the last 12 hours alone about the scam, which purports to be from Inland Revenue.

According to a statement from Inland Revenue, the email and attached form look ‘very convincing’.

The phishing scam’s sender address “appears as “Inland Revenue Department” but is actually sent from IRDxxxxx@s1.nzr.review. The address is false, but looks convincing to the layperson’s eye,” a statement from Inland Revenue says.

“A form comes as an attachment called TaxReturn.HTM. Again it looks convincing but is fake and designed to collect personal and credit card data,” the statement continues.

Inland Revenue strongly warns recipients not to open the attachment.

If you have clicked on the form and submitted any personal or credit card data please contact your bank immediately.  We also recommend you contact IDcare (http://www.idcare.org or phone 0800 201 415).

People can also notify Inland Revenue at phishing@ird.govt.nz

The content of the phishing email is below:

From: "Inland Revenue Department" <IRDny621@s1.nzr.review> Date: 24 August 2017 at 17:41:31 GMT-6 To:  Subject: IRD Refund Status (IRD-1G993) Inland Revenue Department (IRD) 25-August-2017 As you were informed, we have determined that you should receive a tax refund. We have tried to process your refund however, the transaction has not been authorized. Possible reasons are: - Your financial information has been changed or updated; - Error with your personal information (e.g. misspelled name or address). To receive your tax refund, please follow next steps: - Save the attached tax return form and open it in a web browser (e.g. Safari, Firefox or Chrome). - Once opened, you will be provided with the steps to complete and submit your tax return form. Please allow up to 28 days for your refund to be processed. In the meantime, if your financial details are changed, please resubmit the form. If you can't download, open or submit the form, please try using a different browser. Andrew Allen Inland Revenue Department Message ID: IRD029 This mailbox is not monitored and you will not receive a response before to submit the form. To Unsubscribe from future notifications, reply to this email with Unsubscribe in the subject line.

On the road again: How to tackle mileage reporting for business
There may not be too much of a budget for company vehicles in an SMB’s day-to-day business, which means many people are increasingly using their own vehicles for work purposes.
Digital experience managers, get excited for Adobe Summit 2019
“Digital transformation may be a buzzword, but companies are trying to adapt and compete in this changing environment.”
HP extends laptop & workstation recall due to battery fire hazard
HP has extended its worldwide recall of several notebooks and mobile workstations due to the high risk of fire and burn hazards.
Privacy Bill may limit breach fines to $10,000
The Privacy Commissioner was seeking maximum breach fines of up to $1 million against body corporates.
Kathmandu breached, customer information accessed
Kathmandu is notifying potentially affected customers directly and has advised them to change their passwords for its online loyalty programme.
Was Citrix unaware of its own data breach until the FBI got involved?
According to a blog post from Citrix’s CSIO Stan Black, the FBI contacted Citrix on March 6 and advised that international cybercriminals had allegedly gained access to Citrix’s internal network.
How businesses can transform their customer experience in a realistic and timely way
“Businesses can’t simply decide to transform one day, then jump straight into making change for change’s sake."
Gartner: Marketing personalisation can be make or break
A Gartner survey shows brands risk losing 38% of customers because of poor marketing personalisation efforts.