Over the past few years, many identity thefts and other frauds have been committed by scammers who contact consumers posing as the IRS. They gain access to consumers’ financial information in order to commit identify theft or simply drain a consumer’s bank account.

Usually, this type of scam is done by “phishing”. Thieves send phony emails that appear to be from the “IRS”, directing consumers to a separate link where a tax refund or rebate can be claimed. The consumer is asked to provide personally identifying information such as social security numbers or bank account information, which scammers then use to commit identity theft. More about phishing and identity theft.

Tax related scams also reach consumers by telephone. Callers claim that a rebate is available because the consumer filed a tax return early, then asks for a bank account number in order to deposit the money. The thief then drains the consumer’s bank account. More about telephone scams

Often, consumers respond to these schemes very quickly without thinking, either because they associate the IRS with tax refunds, or because they fear a tax audit. However, don’t be fooled – phishing schemes are elaborate. These fraudulent emails and websites look very real, using logos and web addresses of agencies or companies that are trusted by the public. Tax scam emails usually include references to “irs” somewhere in the web address, as well as “.gov” or “.org” designations.

Consumers should remember that the Internal Revenue Service does the vast majority of its business through the U.S. Postal Service. If you submit your tax return electronically, the IRS will not send you an email asking for your bank account number, Social Security Number, or other financial information, because you have already sent that information. Likewise, if the IRS has a rebate, refund, or an audit in store for you, you will be contacted by U.S. mail, not by telephone.

Anytime you receive a suspicious email or telephone call requesting personal information, close the email or hang up the phone. Remember: If it is a legitimate request, you may recontact the company or agency using a method you know to be accurate, and thereby determine whether the request was genuine.

To protect yourself against suspicious emails, phishing schemes, or other tools of the identity theft trade, visit the Identity Theft FAQs.