Phishing and scams

How to spot a scam or phishing attempt

DOR does not release your confidential tax information. However, if a tax warrant was filed against your business, that warrant becomes public information and published through the courts. Fraudsters may use that information to impersonate DOR and try to scam you.

Here are some ways you can spot a scam or phishing attempt:

• Inaccurate website address. Make sure the URL in your browser is the correct website address.
• Sense of urgency. Scammers will try to rush you into providing information.
• Request to wire funds or provide sensitive information.
• Incorrect contact information like 800 numbers.
• Threats to seize property for nonpayment.

Scams can be via phone, letter, email, text, or even on a website that looks legitimate but is not.

How to tell if a communication is real

If we send you a letter, it will also be in you My DOR account. You can logon to verify that it’s real or call us to verify.

A legitimate letter from DOR will include:

• Washington State Department of Revenue logo.
• A complete return mailing address.
• An option to respond online, by phone, or by mail.
• The department’s website address.
• A detailed explanation for why it was sent.
• An explanation of your rights as a taxpayer.

Important things to remember when working with DOR on tax issues

• DOR does not charge businesses to access relief or tax assistance options.  
   
• DOR employees will NOT call and ask for your Social Security number, bank account, or credit card number. If you call DOR, you may be asked to confirm the last four digits of your Social Security Number to confirm your identity.
   
• If you receive a call from someone claiming to be from DOR asking for your social security number, bank account, or credit card number, hang up, and contact us at 360-705-6705. You may also report suspicious calls to the Attorney General’s Office and the Federal Trade Commission (FTC) fraud line.

You may receive a call from DOR agents or from our Initial Contact Team (ICT) regarding your business account. DOR agents will leave a message asking you to return their call. Call back phone numbers can be for a specific DOR agent assigned to a taxpayer account or from the ICT’s number, 253-661-4279. If you are unsure whether a call or message from DOR is legitimate, call the department at 360-705-6705 or the ICT at 253-661-4279 for additional information and assistance. 

Examples of past scams and phishing attempts

Suspicious letters

We recently received information that scam artists are targeting Washington state taxpayers with a scam involving letters from the "Tax Resolution Unit" or something similar. The letters make threats, including the seizure of taxpayers' property unless they immediately pay back taxes.

This recurring scam has been reported to other state revenue or taxation departments several times in recent years. It follows a common strategy that involves scam artists posing as a public official or a government entity. The goal is to cause confusion and use high-pressured tactics to swindle money from unsuspecting victims.

Don’t fall for the scam! These letters are not sent from the Washington State Department of Revenue.

Fraudulent email and phone messages

Here is another scheme that involves an email similar to the one below. Contact us if you receive a message like this. Also consider filing reports with the Washington State Attorney General’s Office and Federal Trade Commission consumer protection teams.

TAXPAYER NOTICE OF LIEN
Lien Number:

The Washington Department of  Revenue has filed a lien in County Probate Court(s) and, or in Uniform Commercial Code Financial Statement of the Secretary of State. This action has been taken to protect the interest of the state,since you have failed to make full payment of the tax liability referenced above.
Your file has been transferred to the Collection Services Division. The lien will be released upon full payment, which includes interest that accrues daily. Payment must be made in cash by(wire transfer) or other mode of payment in order to ensure a prompt lien release on before 20th of January 2015, contact the Collection Division by fax or email them for payoff information.
-----------------------------------------------------------
Washington State Department of Revenue
Collection Services Division
Wenatchee, WA 98807-0220
Email:revenuecollection@mail2washington.com
Fax: 0871 528 0843

Business Licensing Service email phishing scam

A number of businesses have been targeted by an email phishing scam that appears to be from DOR. These emails remind the businesses that endorsements must be renewed and encourages them to do so by following a provided link.

These emails are not from DOR. Any official message regarding a business’ license endorsement renewal will be from cms@dor.wa.gov and will only alert the business that they have a new message in their My DOR inbox.

What to do if you receive a suspicious email:

Do not click any links, reply, or provide any information. Check the expiration date on your business license document.

If your business license renewal is coming due, go directly to secure.dor.wa.gov/ and log in to your account.

Telephone scams

These scammers fraudulently claim to be from DOR and request over-the-phone payment to renew expired business licenses.

DOR will never ask for or take payment for license renewals over the phone. DOR mails businesses a notice about six weeks before their renewal is due and a delinquent notice a week after the license expires.

License renewals should be made through your business’s secure My DOR account.

If you receive one of these fraudulent calls and want to check your license status, visit the My DOR website at http://secure.dor.wa.gov and log in to review your account information.

Phishing scam targets SAW users

Some scammers are sending fake SecureAccess Washington (SAW) text messages in an attempt to trick people into providing their account credentials and personal data.

The phishing text says:

“Your SecureAccess Washington (SAW) claim account is currently on hold for verification, please verify by following the instruction in the link below.”

If you click the bit.ly link in the text, you are taken to page that asks for your username and password. The site will accept any credentials that you enter and then asks for your Social Security number, driver’s license, and mother’s maiden name. You are then redirected to the Washington State Employment Security Department login page.

DOR and SecureAccess Washington will never send an email or text message that:

• Asks for validation of your username and password.
• Contains bit.ly links.

Keep your confidential information safe. Do not click on the bit.ly links in these text messages. 

Phishing scam targets SAW users via email 

Some scammers are sending fake SecureAccess Washington (SAW) emails in an attempt to trick people into providing their account credentials.

In the phishing email example below, users are told they have 24 hours to correct inaccurate information or their SAW account will be restricted. DOR or SAW administrators will never send you an email asking for validation of account details.

Cyberattacks often begin with phishing campaigns that try to trick you into downloading malware or provide account credentials. Now, as always, it is important to be on the lookout for emails in both your personal and work accounts that appear to be suspicious. Typos are a tell-tale sign of phishing emails.