2012 SCAM UPDATES:
NEW - January 17, 2012
Zappos.com Breach
Online shoe and clothing retailer Zappos.com has a data breach affecting more than 24 million customers.
Click here to read more.
2011 SCAM UPDATES:
August 11, 2011
IRS Phishing Scams
Opening your inbox to see that you've received an e-mail from the Internal Revenue Service (IRS) seems bad enough. What's worse is finding out that those authentic-looking e-mails aren't from the IRS at all; they're part of an elaborate phishing scam aimed at stealing your identity and your money. These types of schemes are nothing new, but as scammers get more sophisticated, it's important to know what to look for as you click through your inbox.
In July, the IRS updated its periodic alerts warning taxpayers about scams that fraudulently use the agency's name, logo, or website. Though identity-theft scams may take place through e-mail, fax or phone, the recent IRS alert focuses on known e-mail schemes. "The IRS does not send unsolicited e-mail to taxpayers either about their tax accounts or requesting sensitive personal and financial information," the agency said. They warned recipients not to open attachments or click on any link in e-mails that appear to be from the IRS.
According to the IRS website, IRS-impersonators often e-mail taxpayers to ask for, "certain personal and financial information to process a tax return, tax payment or refund." They may also claim that you are being audited. The purpose of such e-mails is to obtain enough information-such as a name, social security number, bank account or credit card number-to steal your identity.
Below are a few known e-mail scams to look out for, as reported by the IRS:
A comprehensive list of phishing schemes can be found at IRS.gov.
If you receive any suspicious e-mails claiming to come from the IRS, do not open them. If you do open one, don't click on any links or open any attachments, as many of them are malicious. The IRS advises that you forward the e-mails to phishing@irs.gov, then delete them immediately. By doing so, you can help shut down the schemes and prevent others from being victimized as well.
April 4, 2011
The Electronic Payments Association has received reports that individuals and/or companies continue to receive fraudulent emails that have the appearance of having been sent from NACHA. These emails vary in content and appear to be transmitted from email addresses associated with the NACHA domain (@nacha.org). Some bear the name of fictitious NACHA employees and/or departments.
NACHA itself does not process nor touch the ACH transactions that flow to and from organizations and financial institutions. NACHA does not send communications to persons or organizations about individual ACH transactions that they originate or receive.
Be aware that phishing emails frequently have attachments and/or links to Web pages that host malicious code and software. Do not open attachments or follow Web links in unsolicited emails from unknown parties or from parties with whom you do not normally communicate, or that appear to be known but are suspicious or otherwise unusual.
If malicious code is detected or suspected on a computer, consult with a computer security or anti-virus specialist to remove malicious code or re-install a clean image of the computer system.
Always use anti-virus software and ensure that the virus signatures are automatically updated.
Ensure that the computer operating systems and common software application security patches are installed and current.