{"success":true,"data":{"id":"fake-tax-refund-stimulus-payment-phish","label":"Fake IRS/HMRC tax refund or stimulus payment phish — refund pending/approved + click link to claim + enter bank account / SSN / card details to receive it","description":"Phishing email impersonating the IRS, HMRC, or a generic \"tax authority\" — claiming the recipient has an unclaimed tax refund, tax rebate, or stimulus payment ready to collect. The email directs the victim to click a link and enter bank account details, debit card numbers, Social Security numbers, or National Insurance numbers to \"verify identity\" and receive the funds. Legitimate tax authorities never initiate contact by email to request financial details; the IRS explicitly states it communicates by postal mail only. IRS 2024: phishing impersonation is the top complaint to the IRS criminal investigation division; the agency sees a 400%+ surge in tax-related phishing emails during January–April filing season. The tell-tale signs: external domain (not irs.gov or hmrc.gov.uk), urgency/expiry window, request for bank details via click.","tier":"danger","category":"phishing","isThin":false}}