online fraud detection and prevention

8/2/2019 Online Fraud Detection and Prevention

1/33

Online Fraud Detection

and Prevention (OFDP)

Hun KimDirector, [email protected] 283-6742


2/33

Table of Contents

Online Fraud An Increasing

Threat

Online Fraud Detection and

Prevention Office

Online Fraud Trends and

Methodologies

Online Fraud Detection andPrevention Update

Conclusion


3/33

Increasing threats are facing the IRS

and American Taxpayers FTC estimates 10 million Americans

identities are stolen each year Dumpster Diving: Rummaging through

trash looking for bills or other documents

Skimming: Stolen credit/debit cardnumbers using a special storage device

Phishing: Fraudulent e-mail or pop upmessages pretending to be financial

institutions or companies to obtainpersonal information

Stealing: Wallets, purses, mail


4/33

Increasing threats are facing the IRSand American Taxpayers (cont.)

Online fraud is an increasing concernfor the public and can threaten the IRS

business model if taxpayers loseconfidence in the security of electronicchannels

Theft of taxpayer information can leadto refund and financial crimes

Numerous stakeholders are involved inresponse to the online fraud incidents

A comprehensive plan involvingstakeholders is key to combating onlinefraud


5/33

Table of Contents


Threat


Prevention Office


Methodologies


Conclusion


6/33

Business Case to Support Online

Fraud Detection and Prevention Congress set a goal 80% of tax

returns being e-filed

Reduced cost of processing: $0.35

for an e-filed return vs. $2.87 for apaper return

2005 Cyber Security IndustryAlliance survey

48% of consumers avoid making

online purchases due to fear offinancial information theft


7/33

Business Case to Support Online Fraud

Detection and Prevention (cont.)

2006 Business Software Allianceand Harris Interactive Survey

Almost 30% of adults stated security

fears compelled them to shop online

less or not at all

2007 PhishTank report IRS is the 24th most spoofed brand in

the world


8/33

Office of Privacy, Information

Protection and Data Security

Privacy, Information Protection and DataSecurity

(PIPDS)

Privacy, Information Protection and DataSecurity

(PIPDS)

Office ofPrivacy

Office ofPrivacy

Identity Theftand IncidentManagement

Identity Theftand IncidentManagement

Online FraudDetection andPrevention

Online FraudDetection andPrevention


9/33


PreventionOFDP Mission

To reduce online fraud

against the IRS and taxpayers

OFDP Goals

Establish a rapid response capability to detectand mitigate against online fraud incidents

Establish a robust analytic and operational

information sharing capability to prevent and

reduce risk

Promote technological innovations andprocess improvements to tackle current and

next generation online fraud schemes

Promote online fraud outreach and

awareness programs with public and private

sectors to reduce vulnerabilities and minimizethe severity of online fraud

Create a culture of organizational excellence

Outcomes

Reduce the number of

fraudulent refunds issued

Reduce the number of

taxpayers who fall victim

to online fraud schemes

Raise public confidence in

the e-Filing process andincrease the number of e-

file returns submitted


10/33

Table of Contents


Threat


Prevention Office


Methodologies


Conclusion


11/33

Online Fraud Methods

Get Your Refund

Spam based

Unsophisticated attack methodology

Awareness is an effectivecountermeasure


12/33

Online Fraud Methods

e-file Phishing Sites

Web based Advertised through commercial pay per

click sites

Captures the victims tax informationand reroutes the refund to the phishers

bank account

Returns are submitted through valid

Electronic Return Originators (EROs)

Targets Free File users


13/33

Online Fraud MethodsFrom: "Internal Revenue Service"Subject: IRS Notification - Fiscal ActivityDate: Sun, 26 Aug 2007 23:57:35 +0300

After the last annual calculations of your fiscal activity we have determined that you are eligible to receive a tax refund of$268.32.

Please submit the tax refund request and allow us 6-9 days in order to process it.

A refund can be delayed for a variety of reasons. For example submitting invalid records or applying after the deadline.

To access the form for your tax refund, please click here .

Regards,Internal Revenue Service Copyright 2007, Internal Revenue Service U.S.A. All rights reserved.

e-mail

Fraudulent Site


14/33

Fraudulent IRS e-mail

From: "Internal Revenue Service"Subject: IRS Notification - Fiscal Activity

Date: Sun, 26 Aug 2007 23:57:35 +0300

After the last annual calculations of your fiscal activity we have

determined that you are eligible to receive a tax refund of $268.32.

Please submit the tax refund request and allow us 6-9 days in order

to process it.

A refund can be delayed for a variety of reasons. For example

submitting invalid records or appying after the deadline.

To access the form for your tax refund, please click here .Regards,

Internal Revenue Service

Copyright 2007, Internal Revenue Service U.S.A. All rights

reserved.


15/33

Fraudulent Stimulus Payment e-mail

From: [email protected]: 4/18/2008 12:32:00 PMSubject: Get 2008 Economic Stimulus Refund ( $1800 )

Over 130 million Americans will receive refunds as part of President Bush

program to jumpstart the economy.

Our records indicate that you are qualified to receive the2008 Economic Stimulus Refund.

The fastest and easiest way to receive your refund is by direct deposit to your

checking/savings account.

Please click on the link and fill out the form and submit before April 18th, 2008to ensure that your refund will be processed as soon as possible.

Submitting your form on April 18th, 2008 or later means that your refund will be

delayed due to the volume of requests we anticipate for the Economic StimulusRefund.

To access Economic Stimulus Refund, please click here.

Link pointed to: http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


16/33

Fraudulent IRS Site
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


17/33

Official IRS Site
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


18/33

Phishing Statistics by Year

2005 - 2008Yearly Phishing Totals

4

247

897

1329*

0

200

400

600

800

1000

1200

1400

2005 2006 2007 2008

WebsitesIdentified

* Per weekly MarkMonitor reports through May 23, 2008
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


19/33

Phishing Statistics by Month:

April 2007 May 2008

Monthly Phishing Thru May 23, 2008

124

15

44

102

13 6

24 1

19 7

95

34 8

20 6

24 1

152

0

50

10 0

15 0

20 0

25 0

30 0

35 0

40 0

Apr-0

7

May

-07

Jun-0

7Ju

l-07

Aug-0

7

Sep-07

Oct-07

Nov-07

Dec-0

7

Jan-08

Feb-0

8

Mar

-08

Apr-0

8
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


20/33

Phishing Statistics: Foreign Hosted

Phishing Sites April 2007 - May 2008

Foreign Hosted Phishing Sites (4 or more sites per country)

46

15

5 5

17

31

8

35

8 9

90

138

11 10 8 7 5

34 37

13 4

4 5

17

48

1611

15 3

26

813

10

38 38

6

61

0

20

40

60

80

100

120

140

160

180

Argenti

na

Austr

alia

Bhuta

nBr

azil

Bulga

ria

Canada

Chile

China

Denm

ark

Ecua

dor

Fran

ce

Germ

any

Hon

gKon

gIn

diaIran

Irelan

dIsr

ealIta

lyJa

pan

Korea

Lithua

nia

Lu

xemb

ourg

Neth

erlan

ds

Norw

ay

Pakis

tan

Polan

d

Roma

nia

RussianF

edera

tion

Singapo

re

SouthA

frica

Spain

Swi

tzerla

nd

Taiw

an

Thailan

d

Turkey

UnitedK

ingdo

m

Nu

mberofSitesPerCountry
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


21/33

e-File Phishing Sites by Month

April 2007 April 2008e-File Phishing Sites by Month April 2007 - April 2008

1

2

5 5 5

10 10

0

1

3

1

3

2

0

2

4

6

8

10

12

Apr-07 May-0

7

Jun-07 Jul-07 Aug-07

Sep-07 Oct-07 Nov-07 Dec-07 Jan-08 Feb-08 Mar-0

8

Apr-08

E Fil Phi hi Si b H
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


22/33

E-File Phishing Sites by Host

Country April 2007 May 2008e-File Phishing Sites by Hosting Country

Canada

2%

Germany30%

United States

58%

United Kingdom

8%

Russian

Federation

2%

Canada

Germany

Russian Federation

United Kingdom

United States
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


23/33

Table of Contents


Threat


Prevention Office


Methodologies


Conclusion

O li F d D t ti d
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


24/33


Established an initial operating

capability to detect, analyze, and shut

down fraudulent sites

Developed partnerships to pursue

criminal investigation Department of Justice

US Attorney Treasury Inspector General for Tax

Administration

Criminal Investigation

O li F d D t ti d
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


25/33

Online Fraud Detection andPrevention Update (cont.)

Developed partnerships to notify

victims and take accountmaintenance actions as appropriate

Office of Identity Theft and Incident

Management

Customer Account Services

Online Fra d Detection and
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


26/33

Online Fraud Detection andPrevention Update (cont.)

Initiated internal IRS collaboration

initiatives with a number oforganizations

Criminal Investigation

Computer Security Incident ResponseCenter

Electronic Tax Administration Office of Communication, Liaison

and Disclosure
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


27/33


Prevention Update (cont.) Initiated IRS collaboration initiatives

with a number of organizations Multi State Information Sharing and

Analysis Center (MS-ISAC)

US Secret Service- Electronic Crimes

Task Force

Department of Justice- Computer Crimesand Intellectual Property

Federal Trade Commission
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


28/33


Prevention Update (cont.) Initiated IRS collaboration initiatives

with a number of organizations National Cyber Security Alliance-

Anti-Phishing Task Force

Anti-Phishing Working Group

BITS Financial Services Roundtable

Department of Homeland Security-National Cyber Security Division

PIPDS h d l d li
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


29/33

PIPDS has developed an online

fraud, refund crimes, and taxpayerassistance process

Process Phases

Key

Stakeholders

OFDP

ITIM

CI

TakedownVendor

Account

Maintenance

CSIRC

TIGTA

ETA

Identification Site Shut-Down Criminal Investigation Notification Account Maintenance
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


30/33

Table of Contents


Threat


Prevention Office


Methodologies


Conclusion
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


31/33

Conclusion

Online fraud is a global issue

Execution of a comprehensivestrategy in partnership with all

stakeholders is the key to success Please visit

http://onguardonline.gov

www.IRS.gov
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


32/33

Conclusion

Please report suspicious tax relatede-mails to

IRS: [email protected]

FTC: www.ftc.gov/idtheft
http://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htmhttp://forty-two.info/msm/install/templates/.www.irs.gov/get-refund/irfofgetstatus.htm


33/33

online fraud detection and prevention

Documents