The IRS is warning of a new scam in which people receive and email claiming that they will receive money for filling out a survey. In this case, rather than requesting social security numbers they only ask for a name and phone number.

It is believed that those who provide their name and phone number will later receive a call in which they are asked for the rest of the information required to empty their bank accounts, or max out their credit cards.

Punch number one is the phishing email. Punch number two is what we call “vishing”, which is like phishing only it is done over the telephone. Those of you older than about 8 years will simply call it a phone scam.

At any rate, the social engineering attack is in two stages so that the target has already been set up for the request for useful information. The IRS is not going to pay you for your opinion and not going to initiate contact via email.

If this is like a “duh” moment for you then please share it with those you know who are quite gullible.

Randy Abrams is the Director of Technical Education for ESET LLC