Fraud Email from ATO tax return

OMg….recieved a fraud email from ATO. This one look so real from [[email protected]]


From: Australian Taxation Office ([email protected])
Sent: Wednesday, 24 July 2013 7:10:28 AM

Australian Taxation Office24/07/2013 TAX REFUND NOTIFICATION

After the last calculation of your fiscal activity we have determined that you are eligible to receive a refund of 4292.98 AUD. For more details please follow the steps bellow :

  • Right-click the link on the attachment name, and select Save Link As, Save Target As or a similar option provided.
  • Select the location into which you want to download the file and choose Save.
  • Open the file Microsoft Word file to view the details. Clint Ayala,Tax Refund DepartmentAustralian Taxation Office

Everyone should be aware of this~!!!!

Comments

  • They actually link to PayPal and other major bank's website on the internet banking log in page, please be aware !!!!!!!!!!

  • Have you submitted your tax return yet?

    It's not particularly sophisticated though, is it.

    • No, but I dream that I can have 4292.98 AUD….never happen to me =.=

  • anyone know how they spoof the email address? and what we can do to see around it?

    • This has been possible from the very beginning with the email protocols in use, which were not built for security. Essentially it's the difference between the envelope sender and the content sender headers. The latter is what you see and is not verified.

  • Please check, this is the email address that the Fraud Email from ATO tax return.

    Australian Taxation Office [email protected] via hotmail.com

    I don't think ATO will send email out via Hotmail, right ?

  • The only real time you will get a $4292.98 notice from the ATO will be if you owe them….

    Oh BTW why would they put AUD after the figure, they only tax in Australian Dollars, so they wouldn't even put AUD just a plain old $ sign.

  • I'd also expect the ATO to know how to spell and not use "bellow" when they mean "below"

    • +1

      I read somewhere that this kind of mistake acts as a sort of filter to weed out people who are smart enough and unlikely to be a good victim, leaving them more time for the gullible. It may not be a deliberate strategy, just one that evolved.

  • Check the header for reply to email. You can spoof headers easily.

  • when in doubt —-do not open and forward to

    [email protected]

    this is the site for the AFP and INTERPOL.

  • Simply cannot trust any emails from so-called banks, PayPal, eBay, post offices, tax office, etc. no matter how real they look. If you are ever interested in one of their products, want to download anything, simply just go to their direct website address to be on the safe side. Never ever trust any link in an email.

    Although I receive an email each year from the Tax Office, reminding me to download the latest online tax return, I still go directly to the tax office website to do this.

    Mum (85) rang me the other day and said Norton on her computer wanted to do some cleaning of files but needed her password, but fortunately she couldn't remember it! Gee, there are some rotten people out there.

  • You know its pretty simple to avoid. Have one email address with your real name for. Official i.e government and trusted business only I.e paypal.

    All else including ebay and facebook. signing up to unknown websites chatrooms use a alias nickname or fake name as your email. Government wont address you by your fake name.

    Ozbargain freebies have often been spammers collecting emails. I know because I received spam a few months later for 'shauna' so I know who it was. And no freebies came. Use a disposable address for that.

Login or Join to leave a comment