The IRS, state tax agencies, and the tax industry, has issued an “urgent alert” to all employers regarding the Form W-2 (Wage and Tax Statement) email phishing scam. (IR 2017-20) The phishing scam has gone beyond corporates and has entered into other sectors, including schools and non-profit organizations. These scammers have been stealing employee information with a scheme regarding wire transfers. Cybercriminals have used a variety of techniques to make an email appear as if it is legitimate. This scam involves an email being sent to an employee in the payroll or human resources departments and requesting a list of all employees and their W-2 Forms. The scammers will also follow up with an “executive” email to the payroll department or comptroller and ask that a wire transfer be made in a specific account.
At Stapley Accounting, we want to protect employers and their employees by reaching out and letting people know about this scam. Remember, that the IRS will never contact you via email or phone. If this happens you know you are being scammed.