The Internal Revenue Service (IRS) has reported an increase in IRS-related phishing emails requesting W-2 information, sometimes combined with a request for an unauthorized wire transfer.
Please remember that the IRS does not initiate contact with taxpayers by email, text message, or social media channels to request personal or financial information.
To help prevent becoming a victim, the following recommendations and best practices should be followed:
- Limit the number of employees within a business who have the authority to handle W-2 related requests or approve/process wire transfers.
- Use out of band authentication to verify requests for W-2 information or wire transfer requests.
- Verify a change in payment instructions to a vendor or supplier by calling to verbally confirm the request.
- Delay the request or transaction until additional verifications can be performed.