We may earn money when you click our links. Learn More. X

Rejected Federal Tax Transaction Email Scam

7/26/12 Update: Fraudulent Rejected Federal Tax Transaction emails are making the rounds once again (almost exactly one year since the last round). We recently had one come through our spam filters (which are very powerful), indicating to us that there are probably quite a few people that will have received this email. Please delete the email, don’t click on any links, and read on for details.

Phishing Alert: Rejected Federal Tax Transaction Email Scam

There are reports of a series of Rejected Federal Tax Transaction email scam emails going out that are disguised to appear as coming from the IRS (Internal Revenue Service). Please disregard these emails and don’t click on any links contained within. They are phishing emails designed to steal your personal information.

Email Examples

Some of the fraudulent emails we’ve been receiving (they include an official looking IRS logo at the top):

Email Received on 7/26/12

  • From: Internal Revenue Service <alerts@irs.gov> (a spoofed (fake sender) email address).
  • SubjectRejected Federal Tax transaction
  • Message body:

Internal Revenue Service United States Department of the Treasury (IRS) (this is represented as an image, not text)

Your federal Tax transaction (ID: [randomly generated #]), recently from your checking account was canceled by the The Electronic Federal Tax Payment System.

Rejected Tax transfer
Tax Transaction ID:[randomly generated #]
Reason for rejectionSee details in the report below
FederalTax Transaction Reporttax_report_[randomly generated #].doc (Microsoft Word Document) (the link does not go to a Word document, but rather a malicious website (please do not visit this site!) located at tiraccontolamusica [dot] it [backslash] reves [dot] html (we have un-linked the location to prevent accidental visits).
Tax Transaction ID:
Reason for rejection
FederalTax Transaction Report
[randomly generated #]
See details in the report below
tax_report_[randomly generated #].doc (Microsoft Word Document) (the link does not go to a Word document, but rather a malicious website (please do not visit this site!) located at tiraccontolamusica [dot] it [backslash] reves [dot] html (we have un-linked the location to prevent accidental visits).

Internal Revenue Service, Metro Plex 1, 8401 Corporate Drive, Suite 300, Landover, MD 20785

Email Received on 7/25/11

  • From: Sylvester_Torres@irs.gov (email from addresses vary)
  • SubjectRejected Federal Tax transaction
  • Variants of this email subject include:
    • Federal tax payment returned
    • Federal tax payment canceled
  • Message body:

Your federal Tax payment (ID: [randomly generated #]), recently sent from your bank account was returned by the The Electronic Federal Tax Payment System.

Canceled Tax transfer
Tax Transaction ID:[randomly generated #]
Reason for rejectionSee details in the report below
FederalTax Transaction Reporttax_report_[randomly generated #].pdf.exe (self-extracting archive, Adobe PDF) (do not click on this link!!)
Tax Transaction ID:
Reason for rejection
FederalTax Transaction Report
[randomly generated #]
See details in the report below
tax_report_[randomly generated #].pdf.exe (self-extracting archive, Adobe PDF) (do not click on this link!!)

Internal Revenue Service, Metro Plex 1, 8401 Corporate Drive, Suite 300, Landover, MD 20785

This email is not from the IRS – the link to the PDF report leads to a site disguised as an IRS site that will attempt to extract sensitive personal information from you. As a rule of thumb, never click on a link within an email. Instead, visit the sites you trust directly by typing their URL (web address) in your browser’s address bar.

Was this article helpful?

Thank you for your feedback!

Tell us how we can make your experience better next time.

Back to Top

We use cookies to enhance your website experience. By continuing to use our site you agree to the use of cookies in accordance with our policy. Click for more information to find out what cookies we use, what they do and how you can disable them.