Scarinci Hollenbeck, LLC, LLCScarinci Hollenbeck, LLC, LLC

Firm Insights

Cybersecurity Alert: W-2 Scam Targeting Businesses

Author: Scarinci Hollenbeck, LLC

Date: April 27, 2017

Key Contacts

Back

IRS issues warning regarding cybercriminals and a new W-2 scam

Businesses should be vigilant about their cybersecurity this tax season. The Internal Revenue Service (IRS) issued a new warning that cybercriminals are targeting businesses with a Form W-2 phishing scam.

IRS Issues Warning On Form W-2 Scam
Photo courtesy of Stocksnap.io

W-2 Phishing Scam

On March 1, 2016, the IRS warned payroll and human resources professionals to beware of an increasingly common phishing email scheme that seeks personal information from employees under the guise of a “spoofed” email from a company executive. According to the IRS, several payroll and human resources offices have fallen for the scheme and mistakenly emailed payroll data, including W-2 forms that contain Social Security numbers and other personally identifiable information, to cybercriminals posing as company executives. The perpetrators then use the stolen personal information for monetary gain, including fraudulent tax returns for refunds.

“This is a new twist on an old scheme using the cover of the tax season and W-2 filings to try tricking people into sharing personal data. Now the criminals are focusing their schemes on company payroll departments,” said IRS Commissioner John Koskinen. “If your CEO appears to be emailing you for a list of company employees, check it out before you respond. Everyone has a responsibility to remain diligent about confirming the identity of people requesting personal information about employees.”

Cybercriminals are increasingly targeting small businesses with phishing emails, malware and other scams. To stay vigilant, companies must stay on top of emerging threats. With regard to the W-2 scam, the IRS highlights that the phishing emails share common characteristics, namely that the email purports to come from the company chief executive officer and requests a list of employees and information, including SSNs. Below are some examples of W-2 phishing scam e-mail requests:

  • “Kindly send me the individual W-2 (PDF) and earnings summary of all W-2 of our company staff for a quick review.”
  • “Can you send me the updated list of employees with full details (name, Social Security Number, date of birth, home address, salary)?”
  • “I want you to send me the list of W-2 copy of employees wage and tax statements, I need them in PDF file type, you can send it as an attachment. Kindly prepare the lists and email them to me ASAP.”

Evolving W-2 Phishing Scam

On February 2, 2017, the IRS warned that the W-2 Phishing Scam is evolving and that cybercriminals are targeting schools, restaurants, hospitals, tribal groups and others.

IRS Commissioner, John Koskinen stated that: “This is one of the most dangerous email phishing scams we’ve seen in a long time. It can result in the large-scale theft of sensitive data that criminals can use to commit various crimes, including filing fraudulent tax returns. We need everyone’s help to turn the tide against this scheme.”

The new scam includes cybercriminals who use “various spoofing techniques to disguise an email to make it appear as if it is from an organization executive. The email is sent to an employee in the payroll or human resources departments, requesting a list of all employees and their Forms W-2.  This scam is sometimes referred to as business email compromise (BEC) or business email spoofing (BES).”

The IRS advised that the latest “twist” to the W-2 scam includes a request made by the cybercriminal to the payroll or comptroller of the entity which asks that a wire transfer of funds be made to a specific account. The IRS learned that the wire transfer scam is being coupled with the W-2 phishing scam and “some companies have lost both employees’ W-2s and thousands of dollars due to the wire transfers.” 

Cybersecurity Tips to Protect Your Business

There are several steps that you can take to protect your business from the W-2 scam and other similar phishing schemes. As with any cybersecurity or data privacy measure, the key is to implement safeguards and educate staff about their importance. Below are several key tips to share with your human resources professionals:

  • Never click on links or download attachments from unknown or suspect emails.
  • Check the email, including the sender’s email address, for signs that it may be fraudulent. In many cases, the email address may contain a minor misspelling or changes in punctuation that are not apparent at first glance.
  • When in doubt, verify the request for W-2 information by placing a phone call to the requestor. Alternatively, you can forward the email to the sender’s verified email address to inquire about its authenticity.
  • To protect the sensitive information contained in W-2 forms, take steps to redact social security numbers or encrypt email messages containing tax information.

IRS Reporting Tips

The IRS urged organizations receiving a W-2 scam email to forward the suspect email to phishing@irs.gov and place “W2 Scam” in the subject line. Further, the IRS recommends organizations that receive the scams or fall victim to same to file a complaint with the Internet Crime Complaint Center (IC3,) operated by the Federal Bureau of Investigation.

No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.

Scarinci Hollenbeck, LLC, LLC

Related Posts

See all
Corporate Consolidation and Antitrust Issues in Mergers post image

Corporate Consolidation and Antitrust Issues in Mergers

Corporate consolidation involves two or more businesses merging to become a single larger entity. The result is often a stronger and more competitive company that can better navigate today’s competitive marketplace. What Is Corporate Consolidation? Corporate consolidation closely resembles a basic merger transaction. The primary difference is that a consolidation creates an entirely new business […]

Author: Dan Brecher

Link to post with title - "Corporate Consolidation and Antitrust Issues in Mergers"
What is Business Law and Why Is it Important? post image

What is Business Law and Why Is it Important?

Business law plays a critical role in nearly every aspect of running a successful enterprise, from negotiating a commercial lease to drafting employee policies to fulfilling corporate disclosure obligations. Understanding what is business law and your legal obligations can help your business run smoothly and build productive relationships with clients, business partners, regulators, and others. […]

Author: Dan Brecher

Link to post with title - "What is Business Law and Why Is it Important?"
Corporate Transactions: Best Practices for Successful Deals post image

Corporate Transactions: Best Practices for Successful Deals

Corporate transactions can have significant implications for a corporation and its stakeholders. For deals to be successful, companies must act strategically to maximize value and minimize risk. It is also important to fully understand the legal and financial ramifications of corporate transactions, both in the near and long term. Understanding Corporate Transactions The term “corporate […]

Author: Dan Brecher

Link to post with title - "Corporate Transactions: Best Practices for Successful Deals"
How to Conduct a Fair and Legal Employee Termination in 2025 post image

How to Conduct a Fair and Legal Employee Termination in 2025

Ongoing economic uncertainty is forcing many companies to make tough decisions, which includes lowering staff levels. The legal landscape on both the state and federal level also continues to evolve, especially with significant changes to the priorities of the Equal Employment Opportunity Commission (“EEOC”) under the Trump Administration. Terminating an employee is one of the […]

Author: Angela A. Turiano

Link to post with title - "How to Conduct a Fair and Legal Employee Termination in 2025"
Admin Dissolution for Annual Report: What You Need to Know post image

Admin Dissolution for Annual Report: What You Need to Know

While filing annual reports may seem like a nuisance, failing to do so can have significant ramifications. These include fines, reputational harm, and interruption of your business operations. In basic terms, “admin dissolution for annual report” means that a company is dissolved by the government. This happens because it failed to submit its annual report […]

Author: Dan Brecher

Link to post with title - "Admin Dissolution for Annual Report: What You Need to Know"
What Is Antitrust Litigation Law? post image

What Is Antitrust Litigation Law?

Antitrust laws are designed to ensure that businesses compete fairly. There are three federal antitrust laws that businesses must navigate. These include the Sherman Act, the Federal Trade Commission Act, and the Clayton Act. States also have their own antitrust regimes. These may vary from federal regulations. Understanding antitrust litigation helps businesses navigate these complex […]

Author: Robert E. Levy

Link to post with title - "What Is Antitrust Litigation Law?"

No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.

Sign up to get the latest from our attorneys!

Explore What Matters Most to You.

Consider subscribing to our Firm Insights mailing list by clicking the button below so you can keep up to date with the firm`s latest articles covering various legal topics.

Stay informed and inspired with the latest updates, insights, and events from Scarinci Hollenbeck. Our resource library provides valuable content across a range of categories to keep you connected and ahead of the curve.

Let`s get in touch!

* The use of the Internet or this form for communication with the firm or any individual member of the firm does not establish an attorney-client relationship. Confidential or time-sensitive information should not be sent through this form. By providing a telephone number and submitting this form you are consenting to be contacted by SMS text message. Message & data rates may apply. Message frequency may vary. You can reply STOP to opt-out of further messaging.

Sign up to get the latest from the Scarinci Hollenbeck, LLC attorneys!