Bucks County Residents Targeted By City Tax Scam

Bucks County residents are being targeted by a fraudulent text message scam purporting to be from the Philadelphia Department of Revenue.

The scam texts, which began on Monday, ask recipients to click on a malicious link to provide banking information for a refund petition.

The Philadelphia Department of Revenue issued a warning to residents in the city and beyond and stated it will never request bank or refund-sensitive information via text message.

Residents are urged to report any suspicious messages as spam and delete them immediately without clicking on any links, replying, or providing any personal information.

City officials said there is no evidence that city databases have been breached.

To protect against phishing scams, officials advise residents to be skeptical of unsolicited requests for sensitive information.

The department said only to trust websites with the phila.gov domain and to verify information through official channels.

Residents who believe they may have shared personal or financial information are advised to report it to the FBI at 215-418-4000 or tips.fbi.gov. They can also contact the federal Internet Crime Complaint Center at www.ic3.gov.

With Bucks County bordering the city, more than 12 percent of residents are employed in Philadelphia, according to data from the U.S. Census.

The Pennsylvania Attorney General’s Office offers information on how to identify scams:

Phishing

Many consumers are now familiar with the Internet scam known as “phishing”. This is a spam message that contains a link to what appears to be a legitimate business, such as your bank, but it is actually a fake website. The email often states that you must update your account information through a bogus link to a scammer’s website and the user, unknowingly, gives out personal information to the fake website. Educating consumers about this type of scam has helped many people avoid becoming victims.

Vishing

Much like the now familiar “phishing” scam, “vishing” scams attempt to trick targets into divulging personal information such as credit card, bank account and social security numbers using new telephone technology. Typically, “vishing” targets will receive a phone call from what appears to be a legitimate business, such as their bank or credit card issuer, wherein a recorded message notifies the target that their account has been compromised. The target is then directed to a 1-800 number where an automated system requests that the caller enter their account or credit card number or even their social security number to secure their account. However, by entering this information, the victim enables the thief to clear the victim?s bank account, run up large credit balances or even open new accounts under the victim’s identity.

Caller ID systems often provide little or no protection against this scam. Using readily available Voice over Internet Protocol phone numbers, which allow individuals to make phone calls using the internet rather than the traditional telephone infrastructure, the scammer is able to disguise both incoming and return phone numbers as those of legitimate business entities. They show up on your caller ID as that of the financial institution the scammer purports to represent, when in reality the VoIP number could be anywhere in the world. This scam is especially disarming because it uses a more familiar medium, the telephone, to more closely mimic the ways in which we typically interact with our financial institutions.

Pharming

The latest evolution in Internet scamming is “pharming”. Through the use of a virus or similar technique, your browser is hijacked without your knowledge. You type a legitimate website into the address bar of a browser and the virus redirects you to a fake site. Although you entered the website address in the browser yourself and the website appears identical to the site you are accustomed to doing business with, you have actually been redirected to a different site. You enter in your identifying information, such as bank passwords and credit card numbers, and unknowingly submit it to someone who is out to steal your identity.

In this scheme, since you typed in the URL yourself and the website has the same appearance as it usually does, it is unlikely that you will know you were redirected to a different website.

Advertisement