From a family friend who bought it and then chickened out of doing his own taxes. My Dad thinks I'm paranoid and doesn't want to ask the friend where he got it (I bought fake software once before, so I probably am a little paranoid). It has an authenticity ring, but that seems like it could be reproduced. I googled, but didn't find any real way to ID fakes.
