Japanese IRS Phishing Scam

Posted on July 24, 2006
Filed Under /dev/null/ | 52 views |

I enjoy a good phishing scam every now and then, particularly the one I received today purporting to be from the IRS and offering me a $63.80 tax refund if I’d be so kind as to click on this link and enter my credit card information:

http://ns0.msl.ne.jp/~takeshi/%20/%20/index.html

Poor Takeshi, seems he might be the unwitting gateway to a Romanian phishing consortium located here (If you do visit, I recommend not entering your credit card information):

http://ap.ro/~gutandgross/%20%20/IRS/refund/caseid886407/pas.php?certegy_vm=trueportlet_change_1_actionOverrideFchaseonlineFchangeFsigninDetails_windowLabel_portlet_signin_pageLabel_page_signin

For fun I decided to fill out their form to see what would happen. Being a Canadian I didn’t have a social security number so I made one up. I also made up my credit card number the first time around but it was rejected. It seems those clever Romanians are using a card number validation script on the backend to make sure they get good data. You have to admire the professional attitude - I can name a number of legitimate sales sites that don’t even bother to do that.

Card rejected I decided to use a legitimate MasterCard number not associated with any real card: 5500 0000 0000 0004. Card accepted and:

We have successfully submitted your request, please allow us 6-9 days in order to process it.You will receive the payment confirmation receipt in your e-mail.

I now await my bogus refund finled against my bogus Social Insurance Number and bogus credit card.

Comments

Leave a Reply