skip to main content
X

CYBERCRIMINALS IMPERSONATE PERSONS OF AUTHORITY WITHIN ORGANIZATIONS

February 16, 2019

CYBERCRIMINALS IMPERSONATE PERSONS OF AUTHORITY WITHIN ORGANIZATIONS

Business taxpayers should be on high alert for cybercriminals attempting to steal W-2 forms and other sensitive information through phishing scams.

In a typical scenario, cybercriminals impersonate persons of authority within a company and send an email to payroll personnel asking for copies of all employee W-2 forms. The scammers do their homework about an entity's organizational chart and all communications appear legitimate.

A W-2 form contains an employee's name, address, Social Security number, income and withholdings. Cybercriminals use that information to file fraudulent tax returns, or they post it for sale on the "dark web".

Businesses need to be aware of these scams and make time to educate employees about internal security processes for appropriately distributing sensitive information. With income tax filing season rapidly approaching, cybercriminals will be out in full force to take advantage of taxpayers.

The Internal Revenue Service reports the scam has affected all types of employers, from small and large businesses to public schools and universities, hospitals, tribal governments and charities.

The W-2 phishing scam has gained momentum nationwide over the last two tax years. The IRS reports more than 200 employers were victimized nationwide in 2017, affecting hundreds of thousands of employees who had their identities compromised.

Business taxpayers who receive this type of email are asked to report the encounter to phishing@irs.gov.

Hide Firm Disclaimer

©2020 UHY LLP. ALL RIGHTS RESERVED.

UHY LLP is a licensed independent CPA firm that performs attest services in an alternative practice structure with UHY Advisors, Inc. and its subsidiary entities. UHY Advisors, Inc. provides tax and business consulting services through wholly owned subsidiary entities that operate under the name of "UHY Advisors." UHY Advisors, Inc. and its subsidiary entities are not licensed CPA firms. UHY LLP and UHY Advisors, Inc. are U.S. members of Urbach Hacker Young International Limited, a UK company, and form part of the international UHY network of legally independent accounting and consulting firms. "UHY" is the brand name for the UHY international network. Any services described herein are provided by UHY LLP and/or UHY Advisors (as the case may be) and not by UHY or any other member firm of UHY. Neither UHY nor any member of UHY has any liability for services provided by other members.

On this website, (i) the term "our firm", "we" and terms of similar import, denote the alternative practice structure conducted by UHY LLP and UHY Advisors, Inc. and its subsidiary entities, and (ii) the term "UHYI" denotes the UHY international network, in each case as more fully described in the preceding paragraph.