This video was published by the IRS.

More than 90% of identity thieves and data breaches start with a phishing email. Phishing scams pose as a trusted company, maybe your bank, a favorite retailer, your tax software provider, or your state tax agency – even the IRS.

Here’s one way to recognize a scam: a phishing email tells an urgent story. For example, there’s a problem with your account, or you have a tax refund pending. It instructs you to open a hyperlink in the email, or download an attachment.

The link may send you to a website that looks familiar, but your username and password goes to the thieves. That attachment may secretly download malicious software. Mobile phone users are especially prone to responding.

If at home, just delete. If at work, follow your organization’s IT guidance. Remember, don’t take the bait. Learn more at IRS.gov/taxessecuritytogether.