Since spammers don’t bother with list hygiene, a new variant results in multiple messages in my spam folder. Today I got 4 versions of this spam. That should be a dead giveaway to anyone receiving these messages. Each one had a different “tax transaction ID”. Looks like the sender tried to include a graphic but it didn’t work (just the old red X in a box).
Senders: Karen_Klein@irs.gov, Hilda_Drake@irs.gov, Kim_Cross@irs.gov, Molly_Phillips@irs.gov
Subject: Federal Tax payment rejected
Text:
Your Tax transaction (ID: 89607236804801), recently sent from your bank account was returned by the your Bank.
Rejected Tax transaction
Tax Transaction ID: 89607236804801
Reason of rejection See details in the report below
Tax Transaction Report tax_report_89607236804801.doc (Microsoft Word Document)
Internal Revenue Service, Metro Plex 1, 8401 Corporate Drive, Suite 300, Landover, MD 20785
Attachment: claims to be a Word doc, but is a hyperlink to download-eftps [dot] com
These are still going around. I got 6 last week. This time the senders were all Internal Revenue Service (either noreply@irs.gov or alerts@irs.gov). The subject lines included:
The text was basically the same as before, plus an IRS logo. Again, the Word document that it said is attached is a hyperlink to sites like: