These emails appear to come from someone in authority. They may say something like, “I’m analyzing some reports and need a copy of our W-2s for last year. Please send ASAP.”
Once the W-2s are in the hands of the cybercriminals, they file fake tax returns for refunds. All employers are at risk, and need to educate their employees. It’s critical to report W-2 thefts to the IRS and to your state tax officials. Send an email to [email protected]. In the subject line, type “W2 Data Loss.” They provide your contact information. Find your state’s contact by emailing the Federation of Tax Administrators at [email protected]. Forward any W-2 and IRS-related scam emails to [email protected].
Finally, review your company policies for sharing employee W-2 data. Consider having two people review the request for W-2 data to see if it’s legitimate before approving distribution. As part of that review, call or meet with the person or office requesting the data to verify they asked for it. Remember, it’s always better to doublecheck it than regret it. Everyone can help protect against W-2 scams.
For more information, go to IRS.gov/identitytheft and see the “businesses” section.