The IRS’ annual “Dirty Dozen” list of tax scams includes a warning for tax professionals and businesses that they remain a top target of identity thieves.
The scammers try to steal client data through “spear-phishing” tactics. Spear phishing involves sending emails or text messages aimed at obtaining sensitive information from specific organizations or businesses by getting recipients to click on a link or an attachment.
Another spear-phishing scam uses emails that appear to come from an official source to target businesses’ payroll or accounting departments, requesting Forms W-2 for all employees.
The IRS recommends using a two-person review process when receiving these types of requests for Forms W-2. The IRS also recommends that businesses require parties to submit any requests for payroll through an official process, like the employer’s human resources portal. Read more.