Multiple Reports of Czech Republic Phishing Messages

We started receiving reports of phishing attempts.  The first few reports came in on Saturday and Sunday the number has tripled.  The message has been the same in all of the reports and below is an example of the message.  Note, this was not sent out by Washburn ITS.  We will never send out such a message or ask for your password.  If you responded to this message, please change your password immediately to a new password you have not used previously.

Your Incident ID is: 130329-018715
This is an automated message to notify you that we detected a login attempt with a valid password to your Washburn! account from an unrecognized device on Sunday, June 14th, 2013 12:26 AM BST.
Location: Czech Republic IP=89.187.142.93
Was this you? If so, you can disregard the rest of this email. If this wasn’t you kindly follow this link http://mywashburnportal.webs.com/ to review your Washburn account
Sincerely,
The Washburn! Helpdesk

We are working to block this message from arriving on campus.  If you have any questions, please contact us at 785-670-3000 or send email to support@washburn.edu.

It’s that time of year again – Time for Income Tax Scams

Every year at this time scammers come out of the woodwork with new scams and reusing old ones designed to obtain tax information for identify theft and financial fraud purposes.  Sometimes these scams are directed at individual taxpayers and at other times they are targeted at businesses and institutions like ours.

The IRS is has already noted a number of scams this year targeting individual recipients by name. Targeted requests are often harder to identify as fraudulent.  These often involve sending modified versions of legitimate IRS forms by fax or e-mail and requesting the recipient fill them out and return them.  These forms are modified so that the recipient to provides all the personal and financial information the scammer needs to perpetrate their fraud.

A recent example can be seen below:

First the real form W-8BEN used for foreign persons to designate their non-US tax status:  http://www.irs.gov/pub/irs-pdf/fw8ben.pdf

Then the fake W-8BEN notice and form some people have been receiving (click to enlarge):

Note in particular the use of a non-IRS e-mail address, the implied urgency: “return to us within 24 hours,” and the insistence on faxing the document rather than using US Mail.

Be especially cautious about any communication that claims to be from the IRS or your employer and that claims to urgently need personal or financial information for tax purposes.

If you receive anything that you believe to be a tax-related scam, you can report it to the IRS here: http://www.irs.gov/uac/Report-Phishing

The IRS also provides the additional information to help protect yourself from “The Dirty Dozen Tax Scams:” http://www.irs.gov/uac/Don%E2%80%99t-Fall-Prey-to-the-2011-Dirty-Dozen-Tax-Scams

And a guide to “Tax Refund Scams:” http://www.irs.gov/uac/IRS-Urges-Taxpayers-to-Avoid-Becoming-Victims-of-Tax-Scams