The Internal Revenue Service and state tax agencies have once again renewed their warning about email scams requesting employee Forms W-2 from company payroll or human resources departments.
Agencies are urged to double check any executive-level or unusual requests for lists of Forms W-2 or Social Security Numbers. Cybercriminals are tricking payroll and human resource officials by disguising emails to make it appear as if it is from an organization executive.
An email is sent to an employee in the payroll or human resources departments, requesting a list of all employees and their Forms W-2. The thieves then attempt to file fraudulent tax returns for tax refunds and/or post the information for sale on the Dark Net. Personnel should pay close attention to the email address of the sender and confirm requests for any sensitive data verbally, using previously known telephone numbers or in-person.
As part of a Security Summit effort, the “Don’t Take the Bait” education series focuses on raising awareness of the critical need for increased computer security and caution when reviewing email inboxes – specifically email scams that identify themselves as a friend, customer or company. The series can be viewed on the IRS website.
The IRS is investigating phishing emails. If an agency receives an email of this type, immediately contact Lisa Raihl at 405-521-3258 or Jean Hayes at 405-522-6300.