The Internal Revenue Service (IRS) has renewed their warning from last year about an e-mail phishing scam. The scamuses a corporate officer’s name to request employee Forms W-2 information from payroll or human resources.
They have already received notifications that the e-mail scam has started making its way across the nation this year for a second time. The IRS urges payroll departments to double check ANY executive level requests for lists of Forms W-2 or Social Security numbers.
This scam first occurred last year. Cybercriminals were able to trick payroll and human resource departments into providing:
- Employee Names
- Social Security Numbers
- Income Information
What do they do with this information?
The cybercriminals take the information and attempt to file fraudulent tax returns for tax refunds.
This phishing e-mail contains company information, like the company’s chief executive officer’s name! It looks like the CEO is sending this request.
What is typically included in the e-mail request?
- Kindly send me the individual 2016 W-2 (PDF) and earnings summary of all W-2 of our company staff for a quick review.
- Can you send me the updated list of employees with full details (Name, Social Security Number, Date of Birth, Home Address, Salary)
- I want you to send me the list of W-2 copy of employees wage and tax statement for 2016, I need them in PDF file type, you can send it as an attachment. Kindly prepare the lists and email them to me asap.
What Do You Do If You Receive An Phishing E-mail?
Report to the IRS! Forward the e-mail as-is to firstname.lastname@example.org
Image courtesy of Stuart Miles at FreeDigitalPhotos.net