People " should avoid opening any attachments or clicking on any links until they can verify the e-mail 's legitimacy , " IRS Deputy Commissioner for Operations Support Richard Spires said in a statement .