Fake tax rebate email doing the rounds
A phishing email from the newly registered domain asblivechatconz.com is impersonating myIR and pushing you to verify bank details for a fake tax rebate.
You could receive an email with a blank subject line that looks like a tax refund notice. It opens with "Kia Ora" and claims you are eligible for a tax rebate, then urges you to log in to myIR and confirm your receiving account details so the refund can be processed. The sender domain is asblivechatconz.com, not Inland Revenue, which is the key detail to notice.
What makes this convincing is that the email can appear to pass normal delivery checks, so it may not be blocked automatically. That does not make it genuine. The sending domain was only registered recently and has no established history as a legitimate sender, which is a strong warning sign for any message claiming to represent a major New Zealand government service.
This is an attempt to steal your myIR sign-in details and possibly your banking information. If you click through and log in, the attacker can capture your credentials, access tax information, and alter payment details for fraud. If you receive it, do not use the link in the message. Go to myIR only through your usual saved link or the official Inland Revenue website.
The domain the message claims to be from. Fresh registrations and known-bad reputations are the strongest technical tells of a spoofed sender.
Domain registered ~23 days ago
Practical steps you or your IT provider can take to reduce the risk from this kind of threat.
- Check: Inspect the sender domain carefully. Inland Revenue messages should not come from asblivechatconz.com.
- Do not: Click email links or enter myIR credentials from a tax rebate message, especially one with a blank subject line or unexpected urgency.
- Verify: Open myIR only through the official Inland Revenue website or your normal saved bookmark, then check for any genuine alerts there.
- Report: Forward suspicious messages to your IT provider or security team so they can block the sender and review whether anyone engaged with it.
- Contact Decision1: If you believe your business has been targeted, contact the Decision1 team immediately.
See what a genuine Inland Revenue (IRD) message looks like, the real sender domain, the real link destination, and where to report a fake.