Arab Press

بالشعب و للشعب
Monday, Apr 06, 2026

Scammers posing as IRS use credible emails to threaten victims

Scammers posing as IRS use credible emails to threaten victims

Scammers impersonating the Internal Revenue Service are perfecting the art of fraud, according to a new report.
Scammers impersonating the Internal Revenue Service are perfecting the art of fraud, according to a new report.

Scams posing as official IRS communication have been around for years - the problem is they become more credible every year, according to research from Abnormal Security, an email security company. The news was first reported by cybersecurity news site Bleeping Computer.

This time, a fake IRS email targeting users of Microsoft’s Office 365 is making the rounds, estimated to have reached as many as 70,000 inboxes, according to a blog summarizing the research.

The fake email claims it has been sent to collect payments. It also threatens to press legal charges.

What makes it more convincing than the usual scam is the attacker’s spoofing technique and language.

The email appears to originate from the “irs.gov” domain, “a credible impersonation of the IRS,” Abnormal Security says.

“Both the spoofed ‘irs.gov’ sender domain and the specific IDs assigned to the recipient give the email a false sense of legitimacy. Additionally, the email creates a sense of authority through its tone and professional language," Abnormal said.

That, combined with urgency – a key component of most legal scams – can cause victims to act rashly and pay off outstanding debts in order to avoid arrest. In this scam, the fraudster claims that they have contacted the person before and that the case has escalated.

“This is meant to provoke immediate action, as the recipient may feel they cannot delay their payment any longer,” Abnormal Security said.

The email also contains specific language such as unique account and loan numbers, as well as docket and warrant IDs. “By using seemingly specific information, the attacker strengthens the aura of legitimacy of the attack, increasing the likelihood of the victim engaging,” the report said.

And the language and the grammar – though not perfect -- are more convincing than usual. Less-effective email scams are riddled with language and grammatical mistakes.

There is a giveaway, however, as is the case with all scams.

A closer look shows the emails' header is actually "shoesbagsall.com."

“Additionally, the reply-to field is a dead giveaway that something is not quite right as it redirects the replies to legal.cc@outlook.com instead of the IRS support mailing address,” according to Bleeping Computer. But not everyone sees these indicators.

Here’s the most important thing to keep in mind to protect yourself: this is not how the IRS operates.

“The IRS will never initiate contact with taxpayers via email about a tax bill, refund or Economic Impact Payments,” according to an advisory from the IRS.

“Don't click on links claiming to be from the IRS. Be wary of emails and websites − they may be nothing more than scams to steal personal information,” the IRS said.
Newsletter

Related Articles

Arab Press
0:00
0:00
Close
Iranian Drone Strike on US Embassy in Saudi Arabia Reportedly Targeted Intelligence Facility
Saudi Deputy Foreign Minister Meets French Embassy Official to Strengthen Bilateral Engagement
Saudi Arabia Calls on United States to Seize Strategic Opportunity to Reshape Middle East
Dating Apps Surge in Saudi Arabia as Social Norms Rapidly Evolve Among Youth
Saudi Arabia Detains Over Fourteen Thousand Illegal Residents in Week-Long Enforcement Drive
Saudi Foreign Minister Engages in Diplomatic Talks with Pakistan, Kuwait and Latvia on Regional Developments
Saudi Arabia Intercepts Cruise Missile as Regional Tensions Intensify
Saudi Stock Market Edges Higher as Tadawul Index Records Modest Gain
Underlying Rivalry Between Saudi Arabia and UAE Persists Despite Temporary Calm
Saudi Arabia’s Non-Oil Sector Contracts in March as Regional Tensions Weigh on Business Activity
Saudi Arabia Unveils Ambition to Establish Prestigious Global Prize Rivaling the Nobel
Saudi Crown Prince to Engage Wall Street in Push for Investment and Economic Expansion
Iran Accuses Saudi Arabia and UAE After Downing of Chinese-Made Drone
Saudi Arabia Condemns Attack on Hospital in Sudan, Calls for Protection of Civilians
Coordinated Drone Strike Targets CIA Facility Within US Embassy in Saudi Arabia
Italy’s Meloni Prioritises Energy Security and Strait of Hormuz Stability During Gulf Tour
Uncertainty Emerges Over Timeline and Direction of Saudi Arabia’s Ambitious Ski Resort Project
UAE and Saudi Arabia Escalate Strategy with Drone Operations Targeting Iran
Trump Delivers Characteristic Remarks on Saudi Crown Prince Amid Intensifying Iran Conflict
Drone Strike on US Embassy in Riyadh Caused Greater Damage Than First Reported
Saudi Arabia Introduces Flexible Solutions for Expired Visas Amid Regional Disruptions
Saudi Arabia’s Online Car Market Accelerates with AI Pricing and Fully Digital Buying Experience
Saudi Arabia Reassesses Defence Strategy as Iranian Drone Threat Drives Shift in Military Partnerships
Drone Strikes Target Saudi Arabia, Kuwait and Bahrain as Regional Conflict Intensifies
Japan and Saudi Arabia Align Efforts to Ease Rising Tensions with Iran
Saudi Crown Prince and Italy’s Meloni Strengthen Strategic Ties in High-Level Talks
SpaceX Explores Potential Five Billion Dollar Investment from Saudi Sovereign Wealth Fund Ahead of IPO
Saudi Arabia Lifts Key Import Barriers to Expand Access for U.S. Beef Exports
Saudi Arabia Enforces Strict Travel Penalties for Visits to Restricted Countries
Italy’s Meloni Embarks on Strategic Gulf Tour to Address Energy Security and Regional Stability
Saudi Film Festival Rescheduled to Summer as Regional Tensions Continue
Saudi Arabia Reports Forty Two Point Six Billion Dollars in Foreign Tourist Spending in 2025
Saudi Crown Prince and Russian President Hold Strategic Call on Escalating Regional Crisis
Saudi Arabia Advances Rail Network as Strategic Alternative to Strait of Hormuz Shipping Route
Ruanyun Edai Launches Saudi Arabia Hub With Forecast of Ten Percent Revenue Growth
Greek Defence Minister Visits Troops in Saudi Arabia Following Successful Missile Interception
Saudi Arabia Expands Global Strategy With Focus on African Critical Minerals
SpaceX Explores Potential Five Billion Dollar Investment From Saudi Fund Ahead of Possible IPO
US Central Command Dismisses Iranian Claim of Mass Casualties Among American Personnel in Saudi Arabia
Co-Diagnostics to Establish Molecular Diagnostics Facility in Saudi Arabia Through Joint Venture
Trump Engages Saudi Crown Prince in Talks on Potential Iran Ceasefire
Saudi Arabia’s Sadara Suspends Operations as Supply Chain Disruptions Intensify
Saudi Arabia Accelerates Energy Shift by Trading Oil Revenues for Battery Investments
Saudi Arabia Introduces Flexible Options for Expired Visas Amid Regional Disruptions
Online Narratives Surge as Iran–US Tensions Spill Into Digital Arena Following Trump Remarks
Saudi Arabia Urges Trump to Seize Strategic Moment as UAE Weighs Ground Deployment
Saudi Arabia Redirects Nearly One Million Barrels of Oil Daily Away from Strait of Hormuz
Saudi Arabia Carries Out Execution of Businessman Linked to 2011 Qatif Unrest
Ukraine–Saudi Defense Pact Signals Rising Demand for Battlefield Expertise
Saudi Arabia Balances Diplomacy and Defense Preparedness Amid Iran Conflict
×