Stimulus scam alert: These fake child tax credit websites will steal your identity

Stimulus scam alert: These fake kid tax credit websites will steal your identity

Yellow sign reading 'SCAM ALERT' atop white computer keyboard.

(Image credit: karen roach/Shutterstock)

Nigerian scammers take created more than than 50 faux U.S. government sites aiming to steal the identities of Americans hoping to get additional stimulus money, reports data-security firm DomainTools.

The websites have addresses such as "AmericanReliefPlan.com", "AmericaFundForStimulus.com" and "ReliefCareFunds.com". (A full list is in the DomainTools report.) These sites claim to be continued to the American Rescue Programme Act of 2021, the legislation that President Joe Biden signed into law in March that created the third wave of stimulus checks.

4th stimulus check: Are more payments coming?
The best identity theft protection services
Plus: $4 billion more in stimulus checks only went out — find your payment condition

The constabulary also provides for half dozen months of advance payments for child tax credits in 2021. About everyone in the U.S. who has a child under 18 at domicile will become hundreds of dollars from the federal government every month between July and December.

In most cases, American parents and legal guardians don't need to practise annihilation to get that money. The first round of checks and directly deposits went out July xv. Merely the U.Due south. government hasn't done the best job of making that clear, and people understandably have questions about how to sign up for the cash.

That's where the scammers jump in.

"Many relief recipients are unaware that this relief will exist automatically assigned to them by the IRS," DomainTools senior security researcher Chad Anderson wrote in the company's report.

"Scammers are using this as an opportunity to collect Social Security numbers and commuter'due south license photographs to use in identity theft."

The dangers of giving out personal information

The scam sites too enquire for your mobile telephone number, home address, engagement of birth and female parent's maiden name, among other things.

Your mobile number can exist used to reset online account passwords, and then can your mother's maiden name. Your address and date of birth, when combined with your full name and Social Security number, tin can be used to steal your identity.

DomainTools plant that a legitimate spider web-design firm in Ibadan, western Nigeria, had registered the suspect domains past at least early June, every bit media attention began to focus on the American child-tax-credit accelerate payments. Anderson said DomainTools had tried to contact the web-design firm just had received no reply.

So if you lot come beyond a site claiming that you demand to provide personal information to go child tax credits, be very suspicious. Only the IRS Child Taxation Credit portal, which looks very slow and whose address ends in "irs.gov," should exist asking for such information.

Once again, most anybody who's eligible to receive child-taxation-credit advance payments is automatically enrolled. Most people don't need to annihilation to get the money, and we have detailed guides for those who practice.

Paul Wagenseil is a senior editor at Tom'south Guide focused on security and privacy. He has also been a dishwasher, fry cook, long-booty commuter, code monkey and video editor. He'southward been rooting around in the information-security space for more than than xv years at FoxNews.com, SecurityNewsDaily, TechNewsDaily and Tom's Guide, has presented talks at the ShmooCon, DerbyCon and BSides Las Vegas hacker conferences, shown up in random TV news spots and even moderated a panel discussion at the CEDIA home-technology conference. You lot can follow his rants on Twitter at @snd_wagenseil.