Smishing – Beware of WhatsApp / SMS messages
If you receive WhatsApp or SMS messages claiming that you are under investigation for incorrect tax filing, promising tax refunds or threatening you with bank account closure, beware. Do not click on the fraudulent links!
To prevent scammers from impersonating IRAS, we are registered with the Singapore SMS Sender ID Registry. Scam messages impersonating IRAS are identified and blocked upfront. You will only receive official SMSes from IRAS with the sender ID “IRAS”.
Watch out for fake IDs spoofing the IRAS ID. Scammers use alphabets, numbers or symbols to create fake IRAS IDs. Some examples are “!RAS”, “I$AS” or “iRAS”.
Smishing attacks are sent via WhatsApp/SMS messages. When you click on the links in the messages, typically you will be led to a seemingly legitimate webpage (spoofed IRAS website or bank website) phishing for your user name, password, account number or other personal information. Scammers use this confidential information to carry out identity fraud.
Sometimes, the links also download malware such as viruses, ransomware, spyware or adware on the devices.
What’s legit from IRAS?
- SMS sender identity is “IRAS”
- IRAS will not send links asking for personal information such as Singpass and banking login details as well as credit card information via SMS or WhatsApp
- IRAS will only send links upon your request
- IRAS will not contact you via WhatsApp, Telegram or Viber.
To view the various screenshots updated by IRAS, please click here.
Let’s ACT now by sharing this with your colleagues, family and friends:
- ADD ScamShield app and security features
- CHECK scam signs and with official sources
- TELL authorities, family and friends about scams.
If you are interested to look for a new tax agent, please or or fill in the form below for a free consultation.