Tax season is in full swing, which means criminals will go to great lengths to separate you from your money, your identity, or anything of value that is within their reach. They may offer seemingly legitimate “tax services” that are actually designed to steal your identity and your tax refund. Often times, criminals will lure you in with an offer of larger write-offs or refunds. Such scams might include fake websites and tax forms that look like they belong to the Internal Revenue Service (IRS) in order to trick you into providing your personal information. Due to the rise in data breaches, you should always take steps to minimize your risk of identity theft and other online-related crimes; this is especially important this time of the year. Below are some warning signs to look for and basic precautions you can take to minimize risk and avoid becoming the next victim.

Warning Signs of an Online Tax Scam

• An email or link requesting personal and/or financial information, such as your name, social security number, bank or credit card account numbers, or any additional security-related information.

• Emails containing various forms of threats or consequences if no response is received, such as additional taxes or blocking access to your funds.

• Emails from the IRS or federal agencies. The IRS will not contact you via email.

• Emails containing exciting offers, tax refunds, incorrect spelling, grammar, or odd phrasing throughout.

• Emails discussing “changes to tax laws.” These email scams typically include a downloadable document (usually in PDF format) that purports to explain the new tax laws. However, unbeknownst to many, these downloads are almost always populated with malware that, once downloaded, will infect your computer.

How to Avoid Being the Victim

• Never Send Sensitive Information in an Email

Information sent through email can be intercepted by criminals. Make sure to consistently check your financial account statements and your credit report for any signs of unauthorized activity.

• Secure Your Computer:

Ensure your computer has the latest security updates installed. Check that your anti-virus and anti-spyware software are running properly and receiving automatic updates from the vendor. If you haven’t already done so, install and enable a firewall.

• Carefully Select the Sites You Visit:

Safely searching for tax forms, advice on deductions, tax preparers, and other similar topics requires great caution. NEVER visit a site by clicking a link sent in an email, found on someone’s blog, or in an advertisement. The websites you land on might look like legitimate sites, but can also be very well-crafted fakes.

• Be Wise with Wi-Fi:

Wi-Fi hotspots are intended to provide convenient access to the internet, however, this convenience can come at a cost. Public Wi-Fi is not secure and is susceptible to eavesdropping by hackers, therefore, never never use public Wi-Fi to file your taxes!

• Look for Clear Signs:

Common scams will tout tax rebates, offer great deals on tax preparation, or offer a free tax, offer great deals on tax preparations, or offer a free tax calculator tool. If you did not solicit the information, it’s likely a scam.

• Be on the Watch for Fake IRS Scams:

The IRS will not contact you via email, text messages, or your social media network, nor does it advertise on websites. Additionally, if an email appears to be from your employer or bank claiming there is an issue that requires you to verify personal information, this is most likely a scam as well. Don’t respond to these types of emails; always contact the entity directly.

• Always Utilize Strong Passwords:

Cybercriminals have developed programs that automate the ability to guess your passwords. To best protect yourself, make your passwords difficult to guess. Passwords should have a minimum of nine (9) characters and include upper and lowercase letters, numbers and symbols.

If you ever receive a tax-related phishing or suspicious email, the IRS encourages you to forward the original suspicious email (with headers or as an attachment) to its phishing@irs.gov email account, or to call the IRS at 800-908-4490.

MAS-ISAC (Multi-State Information Sharing & Analysis Center) January 2020