Cybercriminals are once again taking advantage of government programs to trick unsuspecting victims. A new smishing campaign is targeting New York residents with fake text messages claiming to offer “Inflation Refunds” from the Department of Taxation and Finance. The scam’s real goal? To steal personal and financial data.
The real Inflation Refund initiative is a legitimate program by New York State, designed to help residents offset the impact of inflation. Eligible taxpayers automatically receive refunds based on income thresholds and filing status — meaning no one needs to apply or provide personal information to get their check. But scammers are using this familiarity to launch phishing-style attacks via text messages, tricking recipients into revealing sensitive data.
The fraudulent texts claim that a recipient’s refund has been “approved” and that they must submit payment information by September 29, 2025, to avoid forfeiting their refund under a fake “New York Revised Statute §5747.11.” Victims are urged to click a malicious link supposedly leading to the Department of Taxation and Finance website. However, the page they land on is a carefully crafted phishing site, complete with the state logo and design mimicking the real department’s interface.
Once users click “Check Refund,” the site prompts them to enter personally identifiable information (PII) such as full name, address, email, phone number, and even Social Security Number. This data can be weaponized for identity theft, tax fraud, or unauthorized financial transactions.
Governor Kathy Hochul’s office quickly responded to the wave of fraudulent messages, warning New Yorkers to remain vigilant and never share personal information in response to unsolicited texts or emails. “New Yorkers do not have to do anything to receive an inflation refund check outside of meeting eligibility requirements,” Hochul stated. She reiterated that the Tax Department and IRS never contact individuals by text or call to request sensitive details.
The New York Department of Taxation and Finance also issued an alert clarifying that it does not communicate by text, email, or phone about refund status. Officials are urging residents to report any suspicious communications directly to the Tax Department or IRS, emphasizing that legitimate government agencies will never ask for private information over unverified digital channels.
Cybersecurity experts note that smishing—the SMS version of phishing—is increasingly common due to its high open rates and psychological pressure tactics. Messages that mimic urgent financial or legal matters often lead victims to act impulsively. Protecting yourself involves basic cyber hygiene: avoid clicking on suspicious links, verify government communications through official websites, and never share personal data via text or email.
Conclusion:
This “Inflation Refund” scam serves as a stark reminder that cybercriminals continue to exploit trust in government programs. By staying informed, double-checking official sources, and reporting phishing attempts, New Yorkers can safeguard their identities and finances from digital predators. Vigilance remains the strongest defense in an era where even text messages can be traps.
