A well-crafted SMS phishing effort is harvesting personal data and credit-card details under the guise of offering tax refunds.