IRS said it has already received a number of fake tax returns that had accurate taxpayer names, addresses, Social Security numbers and even bank account information for the victims.
In an unusual twist, bogus refunds were directed to the real taxpayers’ bank accounts. A criminal, posing as a debt collector, then contacted the taxpayers saying the refunds had been sent in error and the victims should forward the money to the crook.
Because these fake returns contained all of the taxpayer’s correct information, down to the right number of dependents, the IRS believes the scam started in tax-preparation offices. The agency assumes that the data was compromised because some preparers were taken in by phishing scams that then loaded malicious software onto their computer systems, making all the taxpayer information that was kept by these preparers vulnerable to theft.