Marcum LLP
Newsletters

Beyond The Numbers - February 2017

 

IRS Warns: Be Aware of Latest W-2 Security Scam

Share:

The IRS has released a warning about the latest email scam targeting payroll and human resources departments. In what's commonly called a "spoofing" e-mail, a cybercriminal poses as high level executive and requests an employee list containing employees' names, social security numbers, birthdates, and/or income information. The bogus emails often utilize the correct name of an actual company executive. Once the requested information is obtained, cybercriminals are then able to file fraudulent returns for tax refunds.

This W-2 scam was first identified in 2016. Earlier this month, the IRS announced that the scam is making its way across the nation for a second time.

[Marcum's Tax & Business Services division offers all forms of accounting and regulatory compliance services. Learn More.]

The IRS has identified some common ways to spot "spoofing" emails. The agency reports that many of these emails contain one of the following phrases (grammatical and punctuation errors are repeated here verbatim):

  • "Kindly send me the individual 2016 W-2 (PDF) and earnings summary of all W-2 of our company staff for a quick review."
  • "Can you send me the updated list of employees with full details (Name, Social Security Number, Date of Birth, Home Address, Salary)."
  • "I want you to send me the list of W-2 copy of employees wage and tax statement for 2016, I need them in PDF file type. You can send it as an attachment. Kindly prepare the lists and email them to me ASAP."

Cybersecurity experts advise taxpayers to look for misspelled words. Second, don't click on any links in the email. Instead, hover your mouse over the line to identify the linked address. Then type the web address into your browser to verify whether or not it is legitimate. Third, if the email appears to originate from an executive whose name you recognize, confirm that he or she actually initiated the information request. Finally, if you received a spoofing email, report it to your IT department.

If you were unfortunately tricked into releasing sensitive information, report it to your supervisor immediately.

Should you have any questions concerning this warning, please contact your Marcum tax professional.

 
Related
 

 
 
HAVE A QUESTION? ASK MARCUM
 
STAY IN TOUCH.

SIGN UP TODAY FOR MARCUM'S NEWSLETTERS.

ABOUT MARCUM LLP

Marcum LLP is one of the largest independent public accounting and advisory services firms in the nation, with offices in major business markets throughout the U.S., as well as Grand Cayman, China and Ireland.

Learn More

CONNECT WITH US
OFFICES

Headquarters
750 3rd Avenue, 11th Floor
New York, NY 10017

Find an Office

(855) MARCUM1
info@marcumllp.com

FOUNDATION

Marcum Foundation

AFFILIATIONS

Leading Edge Alliance

Privacy Policy

This website uses cookies to learn how visitors interact with our website so that we can improve our services and your online experience. By using this website, you agree to our privacy policy.