Tax season is here, and so is a surge in phishing attacks, fake IRS messages and tax-related identity theft attempts.
Whether you file on your own or work with a tax professional, Information Technology Services reminds employees of the following tips to help keep your data, identity and refund safe.
File early. A common scam involves criminals submitting fraudulent tax returns using stolen Social Security numbers to claim refunds. If a criminal files before you do, reclaiming your refund is a lengthy and stressful process.
Request an IRS IP PIN. The IRS offers an Identity Protection PIN, a six-digit code that prevents unauthorized tax filings using your SSN. Apply through the IRS website. It is valid for one calendar year, and a new IP PIN is generated annually for your account. This is especially recommended if your SSN has been exposed in a data breach. Keep your code private and use it only when filing your return.
Enable multifactor authentication. Turn on MFA for all tax-related accounts, including your IRS online account, tax preparation software and financial institution accounts.
Be cautious of misleading tax advice. Bad tax advice (especially on social media) pushes people to misuse forms or claim credits they aren’t eligible for. Following this misinformation can lead to audits, penalties or identity theft.
Stay alert to sophisticated scams and phishing. Scammers frequently impersonate the IRS, tax preparers, payroll departments and financial institutions. AI-generated emails, voice cloning and stolen personal data now make fraudulent messages more convincing than ever. Remember the following:
The IRS does not initiate contact by phone, email, text or social media.
The IRS will not demand immediate payment or threaten arrest or fines over the phone.
Be wary of requests to “verify” direct deposit information or update W-2 details.
Remove your data from brokers before scammers find it.
Protect your refund. Scams targeting refunds are highly effective because they target something people are waiting for: their money. Be cautious of unsolicited emails, texts or calls claiming your refund is delayed or asking you to update deposit information. Use the IRS’s ‘Where’s My Refund?’ feature to independently verify refund status.
Safely exchange tax documents. Avoid emailing tax documents as regular attachments. Instead, use encrypted email services or a secure file-sharing portal your tax preparer provides. If mailing documents, send them through a trusted courier service with tracking options. Ask your tax preparer about their cybersecurity practices.
Back up your tax records. Make digital and physical backups of your tax documents. Store electronic copies in an encrypted cloud storage service or an external hard drive and keep printed copies in a secure location. The IRS generally recommends retaining tax records for three years, but depending on your situation, you may need to keep them longer.
Tax scams are often the entry point to long-term identity theft. If you think you are the target of a tax scam, reference the resources provided by the IRS. Learn more about protecting yourself at defendyourdata.wvu.edu.