Online Threat Alerts (OTA) - Alerting you to scams and frauds.

Tax Support Center 1-808-215-3080 Scam Telephone Number
Tax Support Center 1-808-215-3080 Scam Telephone Number

The Form W-9 tax email scam below is a phishing attack where fraudsters impersonate the Internal Revenue Service (IRS) or a business partner to trick you into downloading malicious files or handing over sensitive personal and financial information.

The Form W-9 Tax Form Scam Email

Hi,

We are reaching out from Support Centre to request a Form W-9 for tax reporting purposes.

Please complete and sign the attached Form W-9, then reply to this email.

If you have questions, reply all so someone from our team can help.

[YOUR GENERATED RECEIPT FOR REFERENCE]

Dear Valued Customer,

A cryptocurrency transaction of $889.49 USD has been initiated through your PayPal account and is currently under review.

Transaction Details

Receipt ID: T6W9-K7S2-93RT

Invoice No: 7K3U9M2JG4

Amount: $889.49 USD

Bitcoin: 0.013 BTC

Status: Pending Verification

If you authorized this purchase, no action is required. If you do not recognize this transaction, please contact our support team within 60 minutes to review or cancel it.

Customer Support: +1 (808) 215-3080

Thank you for your cooperation.

Account Protection Department

Customer Care: +1 (808) 215-3080

How the Scam Works

  • Impersonation: Emails often arrive with titles like "IRS Tax Forms W-9" or come from a fake sender like the "IRS Online Center".
  • Malicious Attachments: They typically include a ZIP archive (such as W-9 form.zip) containing an inflated, malicious Word or OneNote file designed to bypass email security filters.
  • Malware Payload: Opening the document and enabling macros or scripts installs dangerous malware—such as Emotet—which steals emails, contacts, and opens the door for ransomware or further financial fraud.
  • Data & Payroll Fraud: Alternatively, scammers use fake W-9 requests to steal taxpayer identification numbers (TINs), social security numbers, or banking details to commit corporate or payroll fraud.

Key Red Flags

  • Unsolicited Email: The IRS does not initiate contact or request tax forms, personal data, or financial information via unsolicited email.
  • Artificial Urgency: Scammers use threatening language, demands for immediate action, or fake legal consequences to panic you.
  • Suspicious Attachments or Links: Government agencies do not send ZIP files, Word docs with macros, or OneNote scripts for tax compliance.
  • Mismatched Domains: The sender's address will often mimic an official name but use a fraudulent domain.

What to Do If You Receive One

  • Do Not Click or Download: Do not open any attachments, click links, or enable content/macros.
  • Report the Message: Forward the suspicious email in its original form to phishing@irs.gov.
  • Delete It: Remove the email from your inbox and trash/deleted items folder.
  • Protect Your System: If you already opened an attachment or enabled macros, disconnect your device from the internet immediately and run a full antivirus/malware scan or contact your IT department.
0

Comment sectionComments / Answers (0)

Remove sensitive information from your post. Your IP address will be used to display your estimated location.

Comment count 0


waiting