An ongoing smishing campaign is targeting New Yorkers with text messages posing as the Department of Taxation and Finance, claiming to offer "Inflation Refunds" in an attempt to steal victims' personal and financial data.
The Inflation Refund is an initiative from New York State that automatically sends refund checks to eligible residents to help offset the effects of inflation.
Those who qualify include taxpayers who filed a return, meet certain income thresholds, and were not claimed as dependents by another filer. New Yorkers do not need to apply, sign up, or provide any personal information to receive their checks, as they are automatically sent to qualified taxpayers.
In a new smishing attack seen by BleepingComputer, text messages claim to be part of the state's "Inflation Refund Initiative," urging recipients to click a link to provide information for the refund to be processed.
"Your refund request has been processed and approved. Please provide accurate payment information by September 29, 2025. Funds will be deposited into your bank account or mailed to you via paper check within 1-2 business days," reads the phishing text.
"Failure to submit the required payment information by September 29, 2025, will result in permanent forfeiture of this refund under New York Revised Statute §5747.11."
Phishing text
Source: BleepingComputer
Clicking the link brings you to a page impersonating the New York Department of Taxation and Finance, prompting the visitor to check their refund status by clicking on the "Check Refund" button.
Doing so will open a page asking the person to submit their personal information, including their name, address, email address, phone number, and Social Security Number.
... continue reading