The Internal Revenue Service, state tax agencies and tax industry today warned tax professionals of a new scam email that impersonates the IRS and attempts to steal Electronic Filing Identification Numbers (EFINs).
The latest scam email says it is from “IRS Tax E-Filing” and carries the subject line “Verifying your EFIN before e-filing.”
The IRS warns tax pros not to take any of the steps outlined in the email, especially responding to the email. The body of the bogus email states:
In order to help protect both you and your clients from unauthorized/fraudulent activities, the IRS requires that you verify all authorized e-file originators prior to transmitting returns through our system. That means we need your EFIN (e-file identification number) verification and Driver's license before you e-file.
Please have a current PDF copy or image of your EFIN acceptance letter (5880C Letter dated within the last 12 months) or a copy of your IRS EFIN Application Summary, found at your e- Services account at IRS.gov, and Front and Back of Driver's License emailed in order to complete the verification process. Email: (fake email address)
If your EFIN is not verified
by our system, your ability to e-file will be disabled until you provide
documentation showing your credentials are in good standing to e-file with the
© 2021 EFILE. All rights reserved. Trademarks
2800 E. Commerce Center Place, Tucson, AZ 85706
Tax professionals who received the scam should save the email as a file and then send it as an attachment to email@example.com. They also should notify the Treasury Inspector General for Tax Administration at www.TIGTA.gov to report the IRS impersonation scam. Both TIGTA and the IRS Criminal Investigation division are aware of the scam.
Like all phishing email scams, it attempts to bait the receiver to take action (opening a link or attachment) with a consequence for failing to do so (disabling the account). The links or attachment may be set up to steal information or to download malware onto the tax professional’s computer.
In this case, the tax preparers are being asked to email documents that would disclose their identities and EFINs to the thieves. The thieves can use this information to file fraudulent returns by impersonating the tax professional.
The attachment may contain
malware that allows the thief to track keystrokes and eventually steal all
passwords or take over control of the computer systems.
For additional information and help, tax professionals should review Publication 4557, Safeguarding Taxpayer Data, and Identity Theft Information for Tax Professionals.