More than 90 percent of identity thieves and data breaches start with a phishing email. Phishing scams pose as a trusted company: maybe your bank, a favorite retailer, or your state tax agency  – even the IRS.

Here’s one way to recognize a scam: the phishing emails tells an urgent story. For example, there’s a problem with your account, or you have a tax refund pending. It instructs you to open a hyperlink in the email or download an attachment. The link may send you to a website that looks familiar, but your username and password go to the thieves. That attachment may secretly download malicious software.

Mobile phone users are especially prone to responding. If at home, just delete. If at work, follow your organization’s IT guidance.

Remember: don’t take the bait!

Learn more at IRS.gov/taxessecuritytogether.