W-2 Phishing Scams Targeting Diverse Sectors Amid Tax Season

• •W-2 phishing scams are increasingly targeting schools, nonprofits, and tribal organizations.
• •Cybercriminals impersonate executives to trick HR staff into revealing sensitive employee data.
• •Immediate reporting of W-2 thefts to the IRS is crucial for protecting affected employees.

The IRS and state tax agencies issued an urgent alert regarding an evolving W-2 phishing scam targeting various sectors, including schools, nonprofits, and tribal organizations. Cybercriminals are using spoofing techniques to impersonate executives and trick HR employees into disclosing sensitive employee W-2 information. This scam can lead to large-scale identity theft and fraudulent tax returns. The IRS emphasized the importance of immediate reporting by employers to mitigate risks. The phishing attacks are particularly prevalent during tax season, with criminals exploiting employee distractions. Employers are urged to enhance training and limit access to sensitive data to prevent such scams. The IRS has implemented safeguards in collaboration with the tax industry to combat these threats.