[LINK] Fwd: Australian Taxation Office (ATO) refund

[Roger Clarke]

Here's a very nicely constructed scam.

The attachment won't get through.  It's called:
tax refund donwload and complete pdf.html

PDFs of the display and the source are at:
http://www.rogerclarke.com/II/Scam-100209-Get-ATO-Refund.pdf
http://www.rogerclarke.com/II/Scam-100209-PageSource.pdf


>Return-Path: <refund at ato.gov.au>
>X-Original-To: roger.clarke at xamax.com.au
>Delivered-To: roger.clarke at xamax.com.au
>Received: from localhost (mx1.cbr.ideteron.net.au [127.0.0.1])
>	by filter-sub-01.as-ip.net.au (mx2.OVEE.com.au) with ESMTP id 
>B1F61A40237
>	for <roger.clarke at xamax.com.au>; Tue,  9 Feb 2010 12:13:56 +1100 (EST)
>Received: from glas.com (unknown [75.144.168.102])
>	by mx2.ovee.com.au (mx2.OVEE.com.au) with ESMTP id E92B1A40262
>	for <roger.clarke at xamax.com.au>; Tue,  9 Feb 2010 12:13:54 +1100 (EST)
>Received: from User ([67.227.173.158]) by glas.com with Microsoft 
>SMTPSVC(6.0.3790.3959);
>	 Mon, 8 Feb 2010 19:55:01 -0500
>Reply-To: <refund at ato.gov.au>
>From: "refund at ato.gov.au"<refund at ato.gov.au>
>Subject: Australian Taxation Office (ATO) refund
>Date: Mon, 8 Feb 2010 19:55:02 -0500
>MIME-Version: 1.0
>Content-Type: multipart/mixed;
>	boundary="----=_NextPart_000_000D_01C2A9A6.14146A1E"
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Mailer: Microsoft Outlook Express 6.00.2600.0000
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
>Message-ID: <SERVER01mWecm9t0CI700000969 at glas.com>
>X-OriginalArrivalTime: 09 Feb 2010 00:55:01.0947 (UTC) 
>FILETIME=[82A760B0:01CAA922]
>To: undisclosed-recipients:;
>
><x-charset Windows-1251>Dear Taxpayer,
>
>After the last annual calculations of your fiscal activity we have
>determined that you are eligible to receive a tax refund of $650.90.
>
>Please submit the tax refund request and allow us 6-9 days in order
>to process it.
>
>A refund can be delayed for a variety of reasons.
>For example submitting invalid records or applying after the deadline.
>
>To access your tax refund, use the form attached to this email.
>
>
>Regards,
>Australian Taxation Office
>
></x-charset>
>
>
-- 
Roger Clarke                                 http://www.rogerclarke.com/

Xamax Consultancy Pty Ltd      78 Sidaway St, Chapman ACT 2611 AUSTRALIA
                    Tel: +61 2 6288 1472, and 6288 6916
mailto:Roger.Clarke at xamax.com.au                http://www.xamax.com.au/

Visiting Professor in the Cyberspace Law & Policy Centre      Uni of NSW
Visiting Professor in Computer Science    Australian National University