Skip to main content
IT Service Status
IT Service Status

How to Escape from the Latest Phishing Lures

It can be hard to keep up with all the ways scammers seek to obtain personal and sensitive information from unsuspecting victims. It's important to know that phishing attempts are significantly higher around holidays and certain times of the year, like tax season. Having the tools to spot a scam can protect you from giving away financial and other personally identifiable information. Read on to learn about some of the more current phishing trends.

Urgent Text Messages

Unexpected text messages posing to be from commonly used services are written to alarm you into clicking on a link or calling a bogus phone number. Once you act, you are prompted to provide personal information. One popular text, seemingly from USPS, warns that a package can’t be delivered because of an incorrect zip code and provides a link to click so your package can be delivered promptly. As tax time approaches, it is also common for text messages to seemingly come from the IRS concerning a large tax bill or tax refunds.

The best way to tell if a text message is a scan is to check the number – search on Google or search for the text of the message.

Email Spoofing

Like unsolicited text messages, email spoofing occurs when a scammer impersonates a trusted source by manipulating the email sender’s display name or address, often just by changing one letter (e.g., Amazan instead of Amazon), symbol, or number. Always verify the sender’s address before clicking any links, downloading attachments, or scanning QR codes. For example, an email from USPS would not come from an @gmail.com account—all communications from the IRS come from irs.gov.

Don’t Be Lax During Tax Time 

Tax time is stressful, and scammers are counting on you to be distracted and fall victim to their attempts to infiltrate your financial security. Here are a few tax season security tips from the National Cybersecurity Alliance. Read the full article.

Unsolicited IRS Communications

Unsolicited IRS communications: The IRS never initiates contact via email, text, or social media to request financial and/or personal information. These are red flags! To report suspected scams, visit the IRS website to review established reporting protocols.

Keep Your Social Security Number Secure

Since the IRS uses social security numbers to identify taxpayers, keep your card safe, and never share your number via email, phone, or social media.

Request an Identity Protection PIN

The IRS offers an Identity Protection PIN (IP PIN)—a six-digit code that prevents unauthorized tax filings using your Social Security Number (SSN). You can apply for an IP PIN through the IRS website. While it is recommended that everyone signs up for an IP PIN, this is especially true if your SSN has been exposed in a data breach. Once issued, this number should be kept private and used only when filing your return.

Use Multi-Factor Authentication (MFA)

Use MFA on all accounts related to your taxes, including your IRS account, tax preparation software, and any account with a financial institution, like your bank. MFA requires an additional verification step, like a scan of your face, making it much harder for hackers to gain access—even if they have your password.

More Best Practices 

  • Create strong passwords: Create a strong and memorable password. Song lyrics, phrases, or other sentences are good options for creating long passwords that are hard to crack but easy for you to remember. The safest places for your password are your memory or an encrypted password manager—a software application that stores and manages online credentials. There are many options available, including 1Password, Bitwarden, and Dashlane.   
  • Use Antivirus Software: Antivirus software blocks hackers from accessing your information. Northwestern recommends downloading antivirus software for all students, faculty, and staff. Many antivirus apps are available through app stores on tablets and smartphones. Read more tips for securing your device. 

How to Report a Scam 

It is better to be safe rather than sorry! If you are unsure whether the communication you receive is a scam, or if you believe you have fallen victim, there are ways you can check: 

  • IRS, Treasury, and Tax-Related Online Scams:Report Phishing