You did better than me, but at least I didn’t lose out. I just barely avoided having all my assets frozen. Fortunately, I responded immediately to the IRS email (misspellings and all) and sent them my SSN, bank account and routing numbers, and PINs, as requested, so that they would not freeze all my accounts. Their email address? IRS@yahoo.com. It doesn’t get more official than that, does it?
I almost got one of those, too, but it never got to my inbox. My mail server deleted it because it had a virus...