Fake myIR email wants your login

You could receive an email with the subject line Notice: Tax Refund Confirmation and Processing Status Update, written to look like Inland Revenue. It leans on a familiar Kiwi greeting, mentions myIR, and claims you need to review a new letter, fix an income tax assessment, or sort out a bank account details mismatch. The goal is to get you clicking through to a fake myIR login page.

What makes this tricky is that the sending domain, comerterritorio.com, was able to pass normal email checks, so the message can look more legitimate than the usual obvious fake. But that only tells you the sender was authorised to use that domain, not that the domain has any real connection to Inland Revenue. The domain has no established history as a genuine government sender, and it does not match the organisation the email claims to represent.

If you click and sign in, the attacker is after your myIR credentials and any personal or business information you enter. That can lead to tax account access, identity misuse, and follow-on scams using details taken from your Inland Revenue records.

Treat any unexpected myIR prompt with caution, especially one pushing urgency around refunds, letters, or account mismatches. Go to myIR directly from a saved bookmark or the official Inland Revenue website, not from the email link.