Scam Email: Rose Duke

This scam email is not art related but completely insidious. Notice that they've faked most of the header information so you think the return address is someone at Target.com. But the actual reply-to address is different, and sources to a server in Russian (ip number: 178.44.243.148).

From: Rose Duke [RoseDuke77231@gmail.com]
Return-path: [emily.reid@target.com]
Reply-To: [q3icky@rodman-tech.com]
Subject: Your Tax Payment ID: 01037733 has been rejected. Urgent Report information.

Your Federal Tax Payment ID: 010375128 has been rejected. Return Reason Code R21 - The identification number used in the Company Identification Field is not valid. Please, check the information and refer to Code R21 to get details about your company payment in transaction contacts section:

http://eftps.gov/R21[Links to http://eftpsID3512.com/contacts/s3]

 In other way forward information to your accountant adviser.

 EFTPS: The Electronic Federal Tax Payment System PLEASE NOTE: Your tax payment is due regardless of EFTPS online availability. In case of an emergency, you can always make your tax payment by calling the EFTPS.