This sample comes ‘from' "CandiceOdell15573 at gmail dot com", with a reply-to address of "abrown at mediaeng dot com", but these addresses also may change. In our sample, the link they are trying to get you to click claims to be "http://eftps.gov/R21″, but it really goes to http://eftpsID3422.com/contacts/s3.

 

The scammers are now following up the initial mailings with follow-up mailings that say "SECOND NOTICE: Your Federal Tax Payment has been failed." They're an organized bunch!

In any event, and whatever variation you may see, the bottom line is, it's a scam. Don't fall for it, and for goodness sake, don't click on any links!

Here's the full text of this very short, but still very malicious, scam:

Your federal Tax transaction (ID: 8661946516379), recently sent from your checking account was rejected by the The Electronic Federal Tax Payment System.

Rejected Tax transaction
Tax Transaction ID: 8661946516379
Return Reason See details in the report below
FederalTax Transaction Report tax_report_8661946516379.doc (Microsoft Word Document)

Internal Revenue Service, Metro Plex 1, 8401 Corporate Drive, Suite 300, Landover, MD 20785

Please, Please, Please... Don't Fall for this scam and don't click the link. In general, never click a link in an email from someone you do not know - and even if you know the sender, make sure the email message asking you to click the link sounds like it came from the person sending the email. Recently many of the free email accounts provided by Google (gmail) and Yahoo (ymail) have been hijacked and used by spammers.