Beware of Emails attempting to solicit Form W-2 information from human resources professionalsThe IRS has established a process that will allow businesses and payroll service providers to quickly report any data losses related to the W-2 scam currently making the rounds. Currently, a particularly dangerous email scam is circulating. Here’s how it works: Cybercriminals use various spoofing techniques to disguise an email to make it appear as if it is from an organization executive. The email is sent to an employee in the payroll or human resources departments, requesting a list of all employees and their Forms W-2. This scam is sometimes referred to as business email compromise (BEC) or business email spoofing (BES). Because time is critical, the IRS has created avenues for businesses and payroll service professionals to report if they lost data to this scam or if they only received the email without falling victim.
What Should you Do to Prevent Scams like this?
- Employers and tax professionals should notify states of any disclosures of W-2s or other identity information by emailing StateAlert@taxadmin.org
- Make sure your business or organization is using a reputable Managed IT Services provider who can ensure that your email systems use Advanced Threat Protections
- As a reminder, tax professionals who experience a data breach also should quickly report the incident to the IRS. See details at Data Theft Information for Tax