There is no magic fairy dust protecting Macs - Dai Zovi, security researcher and co-author of The Mac Hacker's Handbook.
I have seen two, one pretending to be from alerts@irs.gov, the other pretending to be from noreply@irs.gov. They are, of course, fake, which is obvious when you hover over the hyperlinks.
