Scam/Virus Alert – emails from IRS with Subject “Complaint Case Number…”

IRS Scam email

Scam, Virus, Phishing alert!

Looks like there is a variant of the Better Business Bureau scam is circulating now but seemingly from the Internal Revenue Service, and I was a recipient of one of the emails. It came in with a title of: “Complaint Case Number ###### against User Name” from, supposedly “fraud.dep@irs.gov”. The body itself looked somewhat legit and there was a Rich Text Format (RTF) document attached called “COMPLAINT.rft”.

Update: 05.30.07@6:03pm PST: Security sites are finally picking this up.

It’s my job to be paranoid so I saved the file and ran a virus scan against it. Surprisingly it came up clean (from a Norton Anti-Virus scan). I didn’t believe that so I decided to do a Google search for “complaint.rtf irs” and it produced no results (which means that nobody has posted or I didn’t have enough terms to search). So I took a different approach and searched for “You have received a complaint in regards to your business services .The complaint was filled” which was the first line in the email. That produced a lot of results. After reading the first result, I knew that I was on to a variant. One clue that I had was the formatting of the date: mm/dd/yyyy/ (note the trailing slash). Why is it that these phishers and scammers always do something that is “not quite correct?” Is it a consciously made decision to drop a hint? Also, from reading the linked article above, the attachment contains a trojan downloader that will install a keylogger which supposedly posts back to an IP. Anyway…

So, for everyone’s benefit, I have posted what I received in hopes that people will spread this warning and the other Security sites will pick this up. DIGG this post to be sure to spread the word!

See text below as well as the screen shot I took; note that I replaced my name and company with generic terms but left everything else as I received it:

Dear First Last,

You have received a complaint in regards to your business services .The complaint was filled By Mr. Kevin Ferguson on 05/29/2007/

Complaint Case Number: 875487596
Complaint made By Consumer Mr. Kevin Ferguson

Complaint registered against : – Company Name
Date: 05/30/2007/

Instructions on how to resolve this complaint as well as a copy of the original complaint are attached to this email.

Disputes involving consumer products and/or services may be arbitrated. Unless they directly relate to the contract that is the basis of this dispute, the following claims will be considered for arbitration only if all parties agree in writing that the arbitrator may consider them:

Claims based on product liability;

Claims for personal injuries;

Claims that have been resolved by a previous court action, arbitration, or written agreement between the parties.

The decision as to whether your dispute or any part of it can be arbitrated rests solely with the IRS.

The IRS offers a binding arbitration service for disputes involving marketplace transactions. Arbitration is a convenient, civilized way to settle disputes quickly and fairly, without the costs associated with other legal options.

Here is the screenshot:

IRS Scam email

HTD says: WATCH OUT FOR THIS ONE!

- Advertisement -
- Advertisement -
- Advertisement -

13 Responses

  1. Thanks for posting your warning. Just this morning i received the same scam email and was also a bit confused by it. It was the same email, even the Kevin Ferguson part, only addressed to my name. Anyway, thanks again for your help. You have saved me a day of worry. :>)
    Trish

  2. Thanks for posting your warning. Just this morning i received the same scam email and was also a bit confused by it. It was the same email, even the Kevin Ferguson part, only addressed to my name. Anyway, thanks again for your help. You have saved me a day of worry. :>)
    Trish

  3. I received it an did a Google search which brought me to your site here. Same as Trish it was personally addressed however the scary part was it was from a major Pharmaceutical, public company in Irvine California where I have done some consulting in the past. Yes very concerning!

  4. I received it an did a Google search which brought me to your site here. Same as Trish it was personally addressed however the scary part was it was from a major Pharmaceutical, public company in Irvine California where I have done some consulting in the past. Yes very concerning!

  5. Hi Lori,

    Last night I updated the post to include the information from Symantec about the virus that is attached. Look for the blue shaded UPDATE link. There is a direct link to information about the attachment. Hope that helps!

    Spread the word! DIGG IT!

    – HTD

  6. Hi Lori,

    Last night I updated the post to include the information from Symantec about the virus that is attached. Look for the blue shaded UPDATE link. There is a direct link to information about the attachment. Hope that helps!

    Spread the word! DIGG IT!

    – HTD

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Other articles of interest

Global Product Review Disclosure

Disclosure: This is a global disclosure for product review articles on HighTechDad. It does not apply to Automobile reviews and there are other exceptions. Therefore, it may or may not be applicable to this particular article. I may have a material connection because I may have received a sample of a product for consideration in preparing to review the product and write this or other content. I was/am not expected to return the item after my review period. All opinions within this and other articles are my own and are typically not subject to the editorial review from any 3rd party. Also, some of the links in the post above may be “affiliate” or “advertising” links. These may be automatically created or placed by me manually. This means if you click on the link and purchase the item (sometimes but not necessarily the product or service being reviewed), I will receive a small affiliate or advertising commission. More information can be found on my About page.

About HighTechDad

Michael Sheehan (“HighTechDad”) is an avid technologist, writer, journalist, content marketer, blogger, tech influencer, social media pundit, loving husband and father of 3 beautiful girls living in the San Francisco Bay Area. This site covers technology, consumer electronics, Parent Tech, SmartHomes, cloud computing, gadgets, software, hardware, parenting “hacks,” and other tips & tricks.

Recent Articles

Explore Categories

– Advertisement –

Shop Now!

My Favorite Setapp Apps

Affiliates

Wireless in Bulk? Genius! Shop Budget-Friendly, Unlimited Talk & Text Plans at MintSIM.
  • Save 15% Off at Incase
  • Shop Mount-It!

– Advertisement –

Intellifluence Trusted Blogger
Shop HighTechDad-reviewed products
– Advertisement –