Tax season is stressful enough without having to worry about cybercriminals. Unfortunately, scammers use this time of year to send convincing emails that appear to come directly from the IRS. Whether they are promising a “surprise refund” or threatening you with an “unpaid bill,” their goal is always the same: to trick you.

The Anatomy of a Tax Phish

Most tax scams try to create a sense of urgency to make you click without thinking. They generally want one of two things:

1. To Steal Your Identity: They’ll link you to a fake form asking for your Social Security Number or bank details.
2. To Infect Your Device: Clicking a link or downloading an “invoice” can install malware that tracks your keystrokes or locks your files.

5 Ways to Protect Your Identity (and Your Wallet)

To keep your information safe, keep these “Golden Rules” in mind:

• The IRS Doesn’t “Slide into DMs”: The IRS will never initiate contact with you via email, text message, or social media to request personal or financial information. Official communication almost always starts with a letter in the mail.
• Look, But Don’t Click: Never click a link or download an attachment from a message you weren’t expecting. Even if it looks official, it’s safer to assume it’s a trap.
• Go to the Source: If you’re worried about a tax bill or curious about a refund, open your browser and type irs.gov directly into the address bar. Never use a link provided in an email.
• Forward the Phishing attempt: You should also forward the scam to [email protected] before deleting it. Report suspicious IRS, Treasury and tax-related emails, texts, social media accounts, phone calls and letters. You can help shut down scams and phishing attacks that trick people into sharing personal information online.
• Keep Your Tech Shield Up: Ensure your phone and computer are running the latest software updates and that your antivirus protection is active.

Every Click Matters

Cybersecurity is a team effort. By staying vigilant, you aren’t just protecting your own data—you’re helping keep the entire UCCU community safe.

If you ever feel you’ve accidentally shared UCCU account information with a scammer, contact us immediately so we can help secure your accounts.

Previous

Utah Tech University and UCCU Partner to Empower Students Through Financial Wellness