...aaaand the phishers are out in force

[jenk]

This came into my vendor email account on a client's email system. SO NOT an address the IRS would actually have for me. But nevermind that....

Subject: Official Notification
From: Internal Revenue Service [irs-service@IRS.G0V]¹
To: undisclosed-recipients:;²
Reply-To: <no-reply@irs.g0v>²
X-MSMail-Priority: High³
Sent: Wednesday, February 04, 2009 5:51 AM

After the last annual calculations of your fiscal activity we have determined that you are eligible to receive a tax refund of $92.50. Please submit the tax refund request and allow us 3-6 days in order to process it.⁴ A refund can be delayed for a variety of reasons. For example submitting invalid records or applying after the deadline.⁵

To access the form for your tax refund, please click here :

http://cimaonline.ca/onlinesupport/Internal/Revenue/Service/index.html⁶

Regards,
Internal Revenue Service.

© Copyright 2009, Internal Revenue Service U.S.A.⁷

Right.

1. Note that's an 0 (zero) not O (letter O). In other words, that's irs.g0v, not irs.gov.
2. Yes, I pulled this from the headers.
3. I thought this was a nice touch - it marks it "high priority" in Outlook/OWA, thus making it look more Correct.
4. Because of course the IRS never just mails you your refund unless you place a request.
5. Note the careful setup of why they'll "deny" your "refund request".
6. aaaaand we have a nice, long, Canadian (.ca) URL for "official US government correspondence"? Please. .ca is less suspicious than some, but, hello? Why the hell not irs.g0v, since you're using it above??
7. Cute touch, but I think it'd be more convincing if this irs.gov had similar copyright statements. Which it don't.

Yes, folks, I think this one is really made of fail....