IRS Issues Reminder to Taxpayers as Scams Continue Across the Nation

WASHINGTON — The Internal Revenue Service today warned taxpayers to remain vigilant to scams as they continue to be reported around the country. Phishing, phone scams and identity theft top the list of items normally reported. However, following hurricanes and other disasters, the IRS urged taxpayers to be on the lookout for schemes stemming from these recent events.

“These scams evolve over time and adjust to reflect events in the news, but they all typically are variations on a familiar theme,” said IRS Commissioner John Koskinen. “Recognizing these schemes and taking some simple steps can protect taxpayers against these con artists.”

While individuals and businesses deal with the devastation of Hurricanes HarveyIrma and Maria and wildland fires in the West, criminals may take advantage of this situation by creating fake charities to get money or personal information from sympathetic taxpayers. They may also attempt to con victims by impersonating a relief agency or charity that will provide relief. Such fraudulent scams and solicitations for donations may involve contact by telephone, social media, e-mail or in person.

Below are some of the more typical scams the IRS has seen:

Email Phishing Scams

The IRS has recently seen email schemes that target tax professionals, payroll professionals and human resources personnel in addition to individual taxpayers.

In email phishing attempts, criminals pose as a person or organization that taxpayers trust and recognize. They may hack an email account and send mass emails under another person’s name. They may pose as a bank, credit card company, tax software provider or government agency. If a person clicks on the link in these emails, it takes them to fake websites created by fraudsters to appear legitimate but contain phony login pages. These criminals hope victims will take the bait and provide money, passwords, Social Security numbers and other information that can lead to identity theft.

Scam emails and websites also can infect computers with malware without the user knowing it. The malware can give the criminal access to the device, enabling them to access sensitive files or track keyboard strokes, exposing logins and other sensitive information.

If a taxpayer receives an unsolicited email that appears to be from either the IRS or a program closely linked to the IRS, such as the Electronic Federal Tax Payment System (EFTPS), report it by sending it to phishing@irs.gov.  Learn more by going to the Report Phishing and Online Scams page.

The IRS generally does not initiate contact with taxpayers by email to request personal or financial information. This includes any type of electronic communication, such as text messages and social media channels. The IRS has information online that can help protect taxpayers from email scams.

Phone Scams

The IRS does not call and leave prerecorded, urgent messages asking for a call back. In this tactic, the victim is told if they do not call back, a warrant will be issued for their arrest.

The IRS recently began sending letters to taxpayers whose overdue federal tax accounts are being assigned to one of four private-sector collection agencies. Because of this, taxpayers should be on the lookout for scammers posing as private collection firms. The IRS-authorized firms will only be calling about a tax debt the person has had – and has been aware of – for years. Taxpayers also would have been previously contacted by the IRS about their tax debt.

How to Know It’s Really the IRS Calling or Knocking on Your Door

The IRS initiates most contacts through regular mail delivered by the United States Postal Service.

However, there are special circumstances in which the IRS will call or come to a home or business, such as when a taxpayer has an overdue tax bill, to secure a delinquent tax return or delinquent employment tax payment, or to tour a business as part of an audit or during criminal investigations.

Even then, taxpayers will usually first receive several letters (called “notices”) from the IRS in the mail. For more information, visit “How to know it’s really the IRS calling or knocking on your door” on IRS.gov.

Tax Refund Fraud — Identity Theft

Tax-related identity theft occurs when someone uses a stolen Social Security number or Individual Taxpayer Identification Number (ITIN) to file a tax return claiming a fraudulent refund.

In 2015, the IRS joined forces with representatives of the software industry, tax preparation firms, payroll and tax financial product processors and state tax administrators to combat identity-theft refund fraud and protect the nation’s taxpayers. This group — the Security Summit — has held a series of public awareness campaigns directed at taxpayers called “Taxes.Security.Together.”  For tax professionals, the “Protect Your Clients; Protect Yourself” and “Don’t Take the Bait” campaigns encourage the tax community to take steps to protect themselves from identity thieves and cybercriminals.

Security Reminders for Taxpayers

The IRS and its Summit partners remind taxpayers they can do their part to help in this effort. Taxpayers and tax professionals should:

  • Always use security software with firewall and anti-virus protections. Make sure the security software is always turned on and can automatically update. Encrypt sensitive files such as tax records stored on computers and devices. Use strong passwords.
  • Learn to recognize phishing emails, threatening phone calls and texts from thieves posing as legitimate organizations, such as a bank, credit card company and government agencies. Do not click on links or download attachments from unknown or suspicious emails.
  • Protect personal data. Don’t routinely carry Social Security cards, and make sure tax records are secure. Treat personal information like cash; don’t leave it lying around.

 

Back to Top  

Fake Insurance Tax Form Scam Aims at Stealing Data from Tax Pros, Clients 

WASHINGTON – The Internal Revenue Service today alerted tax professionals and their clients to a fake insurance tax form scam that is being used to access annuity and life insurance accounts.

Cybercriminals currently are combining several tactics to create a complex scheme through which both tax professionals and taxpayers have been victimized.

There may be variations but here’s how one scam works: The cybercriminal, impersonating a legitimate cloud-based storage provider, entices a tax professional with a phishing email. The tax professional, thinking they are interacting with the legitimate cloud-based storage provider, provides their email credentials including username and password.

With access to the tax professional’s account, the cybercriminal steals client email addresses. The cybercriminal then impersonates the tax professional and sends emails to their clients, attaching a fake IRS insurance form and requesting that the form be completed and returned. The cybercriminal receives replies by fax and/or by an email very similar to the tax professional’s email – using a different email service provider or a slight variation to the tax pro’s address.

The subject line varies but may be “urgent information” or a similar request. The awkwardly worded text of the email states:

Dear Life Insurance Policy Owner,

Kindly fill the form attached for your Life insurance or Annuity contract details and fax back to us for processing in order to avoid multiple (sic) tax bill (sic).

The cybercriminal, using data from the completed form, impersonates the client and contacts the individual’s insurance company. The cybercriminal then attempts to obtain a loan or make a withdrawal from those accounts.

The IRS reminds tax professionals to be aware of phishing emails, free offers and other common tricks by scammers. Those tax professionals who have data breaches should contact the IRS immediately through their Stakeholder Liaison. See Data Theft Information for Tax Professionals.

Individuals who receive the insurance tax form scam email should forward it to phishing@irs.gov and then delete it. Individuals who completed and returned the fake tax form should contact their insurance carrier for assistance.

Back to Top

What Taxpayers Can Do Now Before Filing Their Return in 2018

While taxpayers will not start filing their tax returns for a few months, there are a few things they can do to make the process easier next year. Here are two things that could affect the 2017 returns they will file in 2018.

  1. Report name changes. Recently married or divorced taxpayers who change their name should notify the Social Security Administration. They should also notify the SSA if a dependent’s name changed.  Taxpayers need to do this so that when the taxpayer files next year, the new name on the tax return matches A mismatch between the name shown on their tax return and the SSA records can cause problems in the processing of their tax return and may even delay their tax refund.
  2. Renew Individual Taxpayer Identification Numbers. Taxpayers who use an Individual Taxpayer Identification Number should check to see if their number expired in 2016 or will expire this year. If so, and they need to file a return in 2018, they should apply now to renew their ITIN to avoid certain disallowed tax credits and processing delays next year. Taxpayers who have not used their ITIN to file a federal return at least once in the last three years will see their number expire Dec. 31, 2017. Additionally, ITINs with middle digits 70, 71, 72 or 80 will also expire at the end of the year. Only taxpayers with expiring ITINs need to take any action. To renew an ITIN, a taxpayer must complete a Form W-7 and submit required documentation. No tax return is required when submitting an application to renew.

IRS YouTube Videos: 

Share this tip on social media — #IRSTaxTip: What Taxpayers Can Do Now Before Filing Their Return in 2018. https://go.usa.gov/xnc5w

Back to Top

Consumer Alert: IRS Warns Taxpayers, Tax Pros of New e-Services Scam

WASHINGTON — The IRS today warned all e-Services users to beware of a new phishing scam that tries to trick tax professionals into “signing” a new e-Services user agreement. The phishing scam seeks to steal passwords and data.

The scam email claims to be from “e-Services Registration” and uses “Important Update about Your e-Services Account” in the subject line. It states, in part, “We are rolling out a new user agreement and all registered users must accept its revised terms to have access to e-Services and its products.” It asks the individual to review and accept the agreement but takes them to a fake site instead.

All tax professionals should be aware that as e-Services begins its move later this month to Secure Access authentication and its two-factor protections, cybercriminals likely will make last-ditch efforts to steal passwords and data prior to the transition. As the IRS has warned over the past few years, these sophisticated schemes are adaptive in nature and everyone should be cautious before clinking on a link or entering sensitive personal information.

For those who may have clicked onto this link, perform a deep scan with security software, contact IT/cybersecurity personnel and the IRS e-Help Desk.

To read more about what the IRS is doing to protect accounts with Secure Access authentication, go directly to the main e-Services landing page on IRS.gov.

 

Back to Top  

Tips for Business Owners Who Need to Reconstruct Records After a Disaster

After a disaster, many business owners might need to reconstruct records to prove a loss. This may be essential for tax purposes, getting federal assistance, or insurance reimbursement.

Here are four tips for businesses that need to reconstruct their records:

  • To create a list of lost inventories, business owners can get copies of invoices from suppliers. Whenever possible, the invoices should date back at least one calendar year.
  • For information about income, business owners can get copies of last year’s federal, state and local tax returns. These include sales tax reports, payroll tax returns, and business licenses from the city or county. These will reflect gross sales for a given period.
  • Owners should check their mobile phone or other cameras for pictures and videos of their building, equipment and inventory.
  • Business owners who don’t have photographs or videos can simply sketch an outline of the inside and outside of their location. For example, for the inside the building, they can draw out where equipment and inventory was located. For the outside of the building, they can map out the locations of items such as shrubs, parking, signs, and awnings.

More Information:

Share this tip on social media — #IRSTaxTip: Tips for Business Owners Who Need to Reconstruct Records After a Disaster. https://go.usa.gov/xnc5p

Back to Top

Blog at WordPress.com.

Up ↑