FBI warns of spreading W-2 email theft scheme

(Image: Shutterstock)

(AP)– The IRS is warning businesses about a sharp increase in email phishing scams involving employees’ W-2 forms — scams that can put staffers’ Social Security numbers and other critical information in the hands of thieves.

The government said 200 businesses, public schools, universities, Native American governments and nonprofits were victimized by these scams during this year’s tax filing season, resulting in the theft of several hundred thousand employees’ data. That’s up from 50 in 2016, when the scam first appeared.

Cyberthieves perpetrate the scams by sending emails that appear to come from executives inside the targeted organizations. The emails ask payroll or human resources departments to reply with a list of all employees and their W-2 forms. Some emails also ask companies to transfer money to a specified bank account.

Companies should be on alert for anyone asking for employees’ W-2 forms or for wire transfers of money.

The IRS has an email notification address specifically for businesses and organizations to report W-2 thefts: dataloss@irs.gov. Be sure to include “W-2 scam” in the subject line. Businesses and organizations that receive a suspicious email but haven’t been victimized should forward it to phishing@irs.gov, also with “W-2 scam” in the subject line. Anyone victimized should also contact the FBI’s Internet Crime Complaint Center through its website, http://www.ic3.gov .

The IRS also has suggestions for avoiding being victimized:

—If you get a suspicious email, pick up the phone and call the person who purportedly sent it, using a phone number you can verify as theirs, not one that might be contained in the email. Confirm that this person has in fact made the request.

—Make sure that any employees with access to W-2s or other sensitive information are aware of these scams. Make sure they know the warning signs of phishing scams, including incorrect email addresses.

—Invest in software that will flag suspicious emails.

Copyright 2017 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

WTNH NEWS8 provides commenting to allow for constructive discussion on the stories we cover. In order to comment here, you acknowledge you have read and agreed to our Terms of Service. Commenters who violate these terms, including use of vulgar language or racial slurs, will be banned. Please be respectful of the opinions of others. If you see an inappropriate comment, please flag it for our moderators to review. Also, you can now block any inappropriate user by simple selecting the drop down menu on the right of any comment and selection "Block User" from there.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s