Employers, Beware Form W-2 Phishing Scam

With tax season beginning, the Internal Revenue Service warns all employers to be aware of a Form W-2 phishing scam to which hundreds of organizations fell victim last year. Using a technique known as spoofing, cybercriminals posing as company executives send emails to people with access to company payroll information to trick them into releasing W-2s, and all the sensitive information the forms contain, for all employees. The IRS urges employers to:

  • educate payroll and finance staff
  • limit the number of employees authorized to handle W-2 requests
  • establish additional verification procedures to validate W-2 requests

Learn more about the Form W-2/SSN Data Theft, including how to report a related data loss, at the IRS website.