The IRS is once again warning payroll and human resource officials about an email phishing scam designed to trick employees to provide employee names, W-2s and other information that will help scammers file fraudulent tax returns.
The emails, which appear to be sent from a high ranking member of a company’s management team, go on to request confidential payroll data. According to officials, the following language may be found in these emails:
- Kindly send me the individual 2016 W-2 (PDF) and earnings summary of all W-2 of our company staff for a quick review.
- Can you send me the updated list of employees with full details (Name, Social Security Number, Date of Birth, Home Address, Salary).
- I want you to send me the list of W-2 copy of employees wage and tax statement for 2016, I need them in PDF file type, you can send it as an attachment. Kindly prepare the lists and email them to me asap.
Read Also: New Security Safeguards Introduced To Help Prevent Identity Theft & Refund Fraud
According to a security alert from the IRS, the agency has already received new notifications that the email scam is making its way across the nation. The alert reminds company payroll officials to double check any executive-level or unusual requests for lists of W-2 forms or social security numbers.
“If your CEO appears to be emailing you for a list of company employees, check it out before you respond,” IRS Commissioner John Koskinen said last time this particular email scam made the rounds. “Everybody has a responsibility to remain diligent about confirming the identity of people requesting personal information about employees.”
The IRS, state taxing authorities and tax other industry leaders and organizations have committed to work together to protect federal and state tax accounts from identity thieves.
According to the IRS web page, the awareness campaign is an effort to better inform employees and taxpayers about the need to protect personal, tax and financial data online and at home.
“People continue to fall prey to clever cybercriminals who trick them into giving up Social Security numbers, account numbers or password information,” the site stated. “In turn, criminals use this information a variety of ways, including filing fraudulent tax returns.”
Businesses and organizations are being asked to educate their employees, clients and customers about the very real threat of identity theft. Businesses that retain sensitive financial data should also review and update their security plans. The IRS has created a helpful guide for business owners, complete with checklists.
If you have additional questions or concerns, email Rea & Associates and speak to one of our trained data security experts.
By Lisa Beamer, CPA (New Philadelphia office)
Looking for more insight into the mind of a cybercriminal, check out these resources:
Video: Information Security in a Ransomware World