RSS   Newsletter   Contact   Advertise with us

Authorities warn of increasing W-2 email theft scheme

Share on Twitter Share on LinkedIn
Staff Writer | August 22, 2017
The IRS is warning businesses about a sharp increase in email phishing scams involving employees' W-2 forms—scams.
W-2 form
Data security   200 entities were victimized
That can put staffers' Social Security numbers and other critical information in the hands of thieves.

The government said 200 businesses, public schools, universities, Native American governments and nonprofits were victimized by these scams during this year's tax filing season, resulting in the theft of several hundred thousand employees' data. That's up from 50 in 2016, when the scam first appeared.

Cyberthieves perpetrate the scams by sending emails that appear to come from executives inside the targeted organizations.

The emails ask payroll or human resources departments to reply with a list of all employees and their W-2 forms. Some emails also ask companies to transfer money to a specified bank account.

Companies should be on alert for anyone asking for employees' W-2 forms or for wire transfers of money.

The IRS has an email notification address specifically for businesses and organizations to report W-2 thefts: dataloss@irs.gov. Include "W-2 scam" in the subject line.

Businesses and organizations that receive a suspicious email but haven't been victimized should forward it to phishing@irs.gov, also with "W-2 scam" in the subject line.

Anyone victimized should also contact the FBI's Internet Crime Complaint Center through www.ic3.gov.


 

MORE INSIDE POST