Phishing works like this: a hacker wanting to steal sensitive information (user names, passwords, account numbers, etc.) sends a victim an email disguised as a legitimate source. The email requests sensitive information or directs the recipient to a link that requires a user name, password, or account number. Unbeknownst to the victim, the hacker has manipulated the link within the email to appear to belong to a legitimate organization when, in fact, these manipulated links direct the victims to sites that collect user names, password, and account information for personal gain.

And now, thieves masquerading as IRS employees are sending emails to thousands of people telling them they are entitled to stimulus money. The emails instruct the victims to provide a bank account number so that the money can be transferred. Of course, the hackers take this information to make fraudulent withdrawals.

To shield against phishing, keep this in mind: A legitimate source will never request personal information via email. Never respond to emails that request personal information, and never provide sensitive information after clicking on a hyperlink, even if the website address appears legitimate.

If you have been a victim of ID Theft, comment and share your story.  The more we know about what is out there the better.  Please comment below!