{"id":177,"date":"2024-02-08T13:09:55","date_gmt":"2024-02-08T18:09:55","guid":{"rendered":"https:\/\/freshphish.info\/?p=177"},"modified":"2024-02-11T20:06:13","modified_gmt":"2024-02-12T01:06:13","slug":"convincing-irs-id-me-phish-making-the-rounds","status":"publish","type":"post","link":"https:\/\/freshphish.info\/?p=177","title":{"rendered":"Convincing IRS ID.me Phish Making the Rounds"},"content":{"rendered":"\n<p>It&#8217;s tax season so you know malicious actors are going to try to come after your tax refunds. This one looks pretty legitimate, as long as you ignore the sender&#8217;s email address and the domain the link takes you to. I just recently filed my Federal income taxes for this year and had to establish my identity with ID.me. This email and web site look very much like the real thing, using the legitimate logos and I can&#8217;t see any grammatical or spelling errors. Here&#8217;s the email:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"871\" height=\"806\" src=\"https:\/\/freshphish.info\/wp-content\/uploads\/2024\/02\/email-1.jpg\" alt=\"\" class=\"wp-image-179\" srcset=\"https:\/\/freshphish.info\/wp-content\/uploads\/2024\/02\/email-1.jpg 871w, https:\/\/freshphish.info\/wp-content\/uploads\/2024\/02\/email-1-300x278.jpg 300w, https:\/\/freshphish.info\/wp-content\/uploads\/2024\/02\/email-1-768x711.jpg 768w\" sizes=\"auto, (max-width: 871px) 100vw, 871px\" \/><\/figure>\n\n\n\n<p>I removed the recipient&#8217;s email address and the username portion of the sender since that is the same username portion as the recipient.<\/p>\n\n\n\n<p>Here&#8217;s the landing page:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"617\" height=\"755\" src=\"https:\/\/freshphish.info\/wp-content\/uploads\/2024\/02\/landingpage.jpg\" alt=\"\" class=\"wp-image-180\" style=\"width:880px;height:auto\" srcset=\"https:\/\/freshphish.info\/wp-content\/uploads\/2024\/02\/landingpage.jpg 617w, https:\/\/freshphish.info\/wp-content\/uploads\/2024\/02\/landingpage-245x300.jpg 245w\" sizes=\"auto, (max-width: 617px) 100vw, 617px\" \/><\/figure>\n\n\n\n<p>Something that helps the email and web site look more legitimate is that the email contains links to the legitimate ID.me site website and the link to the phishing page blends in well with the background color where the link is. Plus the phishing page provides an option in case the user forgot their password.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>It&#8217;s tax season so you know malicious actors are going to try to come after your tax refunds. This one<\/p>\n<p><a href=\"https:\/\/freshphish.info\/?p=177\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\">Convincing IRS ID.me Phish Making the Rounds<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[12],"tags":[],"class_list":["post-177","post","type-post","status-publish","format-standard","hentry","category-phish"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.9 - aioseo.com -->\n\t<meta name=\"description\" content=\"It&#039;s tax season so you know malicious actors are going to try to come after your tax refunds. This one looks pretty legitimate, as long as you ignore the sender&#039;s email address and the domain the link takes you to. I just recently filed my Federal income taxes for this year and had to establish\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Matt\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/freshphish.info\/?p=177\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.9\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Fresh Phish - All the freshest phish\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Convincing IRS ID.me Phish Making the Rounds - Fresh Phish\" \/>\n\t\t<meta property=\"og:description\" content=\"It&#039;s tax season so you know malicious actors are going to try to come after your tax refunds. This one looks pretty legitimate, as long as you ignore the sender&#039;s email address and the domain the link takes you to. I just recently filed my Federal income taxes for this year and had to establish\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/freshphish.info\/?p=177\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-02-08T18:09:55+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-02-12T01:06:13+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Convincing IRS ID.me Phish Making the Rounds - Fresh Phish\" \/>\n\t\t<meta name=\"twitter:description\" content=\"It&#039;s tax season so you know malicious actors are going to try to come after your tax refunds. This one looks pretty legitimate, as long as you ignore the sender&#039;s email address and the domain the link takes you to. I just recently filed my Federal income taxes for this year and had to establish\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/freshphish.info\\\/?p=177#blogposting\",\"name\":\"Convincing IRS ID.me Phish Making the Rounds - Fresh Phish\",\"headline\":\"Convincing IRS ID.me Phish Making the Rounds\",\"author\":{\"@id\":\"https:\\\/\\\/freshphish.info\\\/?author=1#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/freshphish.info\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/freshphish.info\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/email-1.jpg\",\"@id\":\"https:\\\/\\\/freshphish.info\\\/?p=177\\\/#articleImage\",\"width\":871,\"height\":806},\"datePublished\":\"2024-02-08T13:09:55-05:00\",\"dateModified\":\"2024-02-11T20:06:13-05:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/freshphish.info\\\/?p=177#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/freshphish.info\\\/?p=177#webpage\"},\"articleSection\":\"Phish\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/freshphish.info\\\/?p=177#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/freshphish.info#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/freshphish.info\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/freshphish.info\\\/?cat=12#listItem\",\"name\":\"Phish\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/freshphish.info\\\/?cat=12#listItem\",\"position\":2,\"name\":\"Phish\",\"item\":\"https:\\\/\\\/freshphish.info\\\/?cat=12\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/freshphish.info\\\/?p=177#listItem\",\"name\":\"Convincing IRS ID.me Phish Making the Rounds\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/freshphish.info#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/freshphish.info\\\/?p=177#listItem\",\"position\":3,\"name\":\"Convincing IRS ID.me Phish Making the Rounds\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/freshphish.info\\\/?cat=12#listItem\",\"name\":\"Phish\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/freshphish.info\\\/#organization\",\"name\":\"Fresh Phish\",\"description\":\"All the freshest phish\",\"url\":\"https:\\\/\\\/freshphish.info\\\/\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/freshphish.info\\\/?author=1#author\",\"url\":\"https:\\\/\\\/freshphish.info\\\/?author=1\",\"name\":\"Matt\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/freshphish.info\\\/?p=177#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/82f14a734f69eb729d8b59b4a2438ea6e14bd793d23b22d4299ec5228b06260a?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"Matt\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/freshphish.info\\\/?p=177#webpage\",\"url\":\"https:\\\/\\\/freshphish.info\\\/?p=177\",\"name\":\"Convincing IRS ID.me Phish Making the Rounds - Fresh Phish\",\"description\":\"It's tax season so you know malicious actors are going to try to come after your tax refunds. This one looks pretty legitimate, as long as you ignore the sender's email address and the domain the link takes you to. I just recently filed my Federal income taxes for this year and had to establish\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/freshphish.info\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/freshphish.info\\\/?p=177#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/freshphish.info\\\/?author=1#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/freshphish.info\\\/?author=1#author\"},\"datePublished\":\"2024-02-08T13:09:55-05:00\",\"dateModified\":\"2024-02-11T20:06:13-05:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/freshphish.info\\\/#website\",\"url\":\"https:\\\/\\\/freshphish.info\\\/\",\"name\":\"Fresh Phish\",\"description\":\"All the freshest phish\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/freshphish.info\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"Convincing IRS ID.me Phish Making the Rounds - Fresh Phish","description":"It's tax season so you know malicious actors are going to try to come after your tax refunds. This one looks pretty legitimate, as long as you ignore the sender's email address and the domain the link takes you to. I just recently filed my Federal income taxes for this year and had to establish","canonical_url":"https:\/\/freshphish.info\/?p=177","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/freshphish.info\/?p=177#blogposting","name":"Convincing IRS ID.me Phish Making the Rounds - Fresh Phish","headline":"Convincing IRS ID.me Phish Making the Rounds","author":{"@id":"https:\/\/freshphish.info\/?author=1#author"},"publisher":{"@id":"https:\/\/freshphish.info\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/freshphish.info\/wp-content\/uploads\/2024\/02\/email-1.jpg","@id":"https:\/\/freshphish.info\/?p=177\/#articleImage","width":871,"height":806},"datePublished":"2024-02-08T13:09:55-05:00","dateModified":"2024-02-11T20:06:13-05:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/freshphish.info\/?p=177#webpage"},"isPartOf":{"@id":"https:\/\/freshphish.info\/?p=177#webpage"},"articleSection":"Phish"},{"@type":"BreadcrumbList","@id":"https:\/\/freshphish.info\/?p=177#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/freshphish.info#listItem","position":1,"name":"Home","item":"https:\/\/freshphish.info","nextItem":{"@type":"ListItem","@id":"https:\/\/freshphish.info\/?cat=12#listItem","name":"Phish"}},{"@type":"ListItem","@id":"https:\/\/freshphish.info\/?cat=12#listItem","position":2,"name":"Phish","item":"https:\/\/freshphish.info\/?cat=12","nextItem":{"@type":"ListItem","@id":"https:\/\/freshphish.info\/?p=177#listItem","name":"Convincing IRS ID.me Phish Making the Rounds"},"previousItem":{"@type":"ListItem","@id":"https:\/\/freshphish.info#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/freshphish.info\/?p=177#listItem","position":3,"name":"Convincing IRS ID.me Phish Making the Rounds","previousItem":{"@type":"ListItem","@id":"https:\/\/freshphish.info\/?cat=12#listItem","name":"Phish"}}]},{"@type":"Organization","@id":"https:\/\/freshphish.info\/#organization","name":"Fresh Phish","description":"All the freshest phish","url":"https:\/\/freshphish.info\/"},{"@type":"Person","@id":"https:\/\/freshphish.info\/?author=1#author","url":"https:\/\/freshphish.info\/?author=1","name":"Matt","image":{"@type":"ImageObject","@id":"https:\/\/freshphish.info\/?p=177#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/82f14a734f69eb729d8b59b4a2438ea6e14bd793d23b22d4299ec5228b06260a?s=96&d=mm&r=g","width":96,"height":96,"caption":"Matt"}},{"@type":"WebPage","@id":"https:\/\/freshphish.info\/?p=177#webpage","url":"https:\/\/freshphish.info\/?p=177","name":"Convincing IRS ID.me Phish Making the Rounds - Fresh Phish","description":"It's tax season so you know malicious actors are going to try to come after your tax refunds. This one looks pretty legitimate, as long as you ignore the sender's email address and the domain the link takes you to. I just recently filed my Federal income taxes for this year and had to establish","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/freshphish.info\/#website"},"breadcrumb":{"@id":"https:\/\/freshphish.info\/?p=177#breadcrumblist"},"author":{"@id":"https:\/\/freshphish.info\/?author=1#author"},"creator":{"@id":"https:\/\/freshphish.info\/?author=1#author"},"datePublished":"2024-02-08T13:09:55-05:00","dateModified":"2024-02-11T20:06:13-05:00"},{"@type":"WebSite","@id":"https:\/\/freshphish.info\/#website","url":"https:\/\/freshphish.info\/","name":"Fresh Phish","description":"All the freshest phish","inLanguage":"en-US","publisher":{"@id":"https:\/\/freshphish.info\/#organization"}}]},"og:locale":"en_US","og:site_name":"Fresh Phish - All the freshest phish","og:type":"article","og:title":"Convincing IRS ID.me Phish Making the Rounds - Fresh Phish","og:description":"It's tax season so you know malicious actors are going to try to come after your tax refunds. This one looks pretty legitimate, as long as you ignore the sender's email address and the domain the link takes you to. I just recently filed my Federal income taxes for this year and had to establish","og:url":"https:\/\/freshphish.info\/?p=177","article:published_time":"2024-02-08T18:09:55+00:00","article:modified_time":"2024-02-12T01:06:13+00:00","twitter:card":"summary_large_image","twitter:title":"Convincing IRS ID.me Phish Making the Rounds - Fresh Phish","twitter:description":"It's tax season so you know malicious actors are going to try to come after your tax refunds. This one looks pretty legitimate, as long as you ignore the sender's email address and the domain the link takes you to. I just recently filed my Federal income taxes for this year and had to establish"},"aioseo_meta_data":{"post_id":"177","title":null,"description":null,"keywords":[],"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":[],"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2024-02-08 18:09:55","updated":"2025-06-04 04:46:59","seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/freshphish.info\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/freshphish.info\/?cat=12\" title=\"Phish\">Phish<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tConvincing IRS ID.me Phish Making the Rounds\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/freshphish.info"},{"label":"Phish","link":"https:\/\/freshphish.info\/?cat=12"},{"label":"Convincing IRS ID.me Phish Making the Rounds","link":"https:\/\/freshphish.info\/?p=177"}],"_links":{"self":[{"href":"https:\/\/freshphish.info\/index.php?rest_route=\/wp\/v2\/posts\/177","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/freshphish.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/freshphish.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/freshphish.info\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/freshphish.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=177"}],"version-history":[{"count":1,"href":"https:\/\/freshphish.info\/index.php?rest_route=\/wp\/v2\/posts\/177\/revisions"}],"predecessor-version":[{"id":181,"href":"https:\/\/freshphish.info\/index.php?rest_route=\/wp\/v2\/posts\/177\/revisions\/181"}],"wp:attachment":[{"href":"https:\/\/freshphish.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=177"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/freshphish.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=177"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/freshphish.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=177"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}