Tax refund email is too good to be true

Filed Under: Spam

The holiday season can be taxing for many of us.

Your house is full of unwanted relatives, kids are crying that they wanted a cuddly Adipose toy not a voice-changing Cyberman's mask, and - of course - a mysterious absence of batteries as soon as the presents have been unwrapped.

If you decide to escape from it by over-indulging in eggnog, be careful that you don't let your defences drop when it comes to securing your computer and bank accounts.

Take this spam email which I just saw, for instance. It's targeted at British tax payers, but we've seen similar phishing scams pretending to come from, say, the American IRS in the past.

British tax phish

Sounds too good to be true, doesn't it? And of course it is.

Everyone would love to get an unexpected windfall, especially if you have spent a little too much money on the festivities. But clicking on that link will actually take you to a bogus website attempting to steal your credentials. Forget Santa and his reindeer helping themselves to a mince pie and carrots as they do their rounds, identity thieves will soon be emptying your bank account.

About the author

Graham Cluley is senior technology consultant at Sophos. The readers of Computer Weekly voted him security blogger of the year in 2009 and 2010, and he pipped Stephen Fry to the title of "Twitter user of the year" too. Which was nice. He was also named "Best Security Blogger" by the readers of SC Magazine in 2011. You can subscribe to Graham's updates on Facebook, follow him on Twitter and circle him on Google Plus for regular updates.