|
News EssentialsThe Newsroom TopicsIRS Resources | Issue Number: IR-2020-71Inside This IssueIRS, Security Summit partners warn tax professionals on scams, urge additional security measures to protect taxpayer data WASHINGTON – The Internal Revenue Service and its Security Summit partners today urged tax professionals to take additional security steps immediately to protect taxpayer data as more practitioners telework and security risks increase. The IRS, state tax agencies and the nation's tax industry continue to see an upswing in data thefts from tax professionals as cybercriminals try to take advantage of COVID-19 and Economic Impact Payments to create new scams. "Identity thieves view the pandemic as a chance to exploit tax professionals as well as taxpayers," said IRS Commissioner Chuck Rettig. "They are using every trick of their criminal trade to con people as well as steal valuable personal and financial information to help enable tax-related identity theft. In many ways, tax pros are one of the first lines of defense. We urge the entire tax community to take additional steps and protect their sensitive data." The partners in the Security Summit – including the IRS, state tax agencies and private-sector tax industry – continue working closely together to watch for new threats during the coronavirus. In addition, IRS Criminal Investigation is actively working to combat scam artists trying to exploit Economic Impact Payments and other provisions related to coronavirus. So far, the scams CI has already seen look to prey on vulnerable taxpayers who are unaware of how the payments will reach them. IRS CI is prioritizing these types of investigations to help protect taxpayers and the tax system. Tax Pros: Use a Virtual Private Network for extra security Cybercriminals can exploit various weaknesses, whether by using a phishing email or an unsecured network, to gain control of a tax professional's computer. Once they have remote control, they can either steal data or complete and file client tax returns but change the bank account information for refunds. The government cannot recommend a VPN provider, but tax professionals can ask trusted colleagues or search for "Best VPNs" to find a legitimate vendor. Major technology sites often provide lists of top services. Never fall for "pop-ups" on websites for VPN or any kind of security software. Those generally are all scams. Multi-Factor Authentication helps protect data Multi-factor authentication means a returning user to the software product must enter not only their credentials (username/password) but also a security code, generally sent as a text to a mobile phone. The idea is the thieve may compromise log-in credentials, but it is unlikely they will have stolen the mobile phone as well. Multi-factor authentication protects the software account from being breached and from client data being stolen. Tax professionals should activate this feature immediately. Avoid phishing scams Tax professionals should beware of emails from criminals posing as potential clients. As people practice social distancing these days, criminals may exploit this process to try to trick tax practitioners into opening links or attachments. For example, crooks may present themselves as a new client and ask the practitioner to view the wage and income information they have in an attachment. The Security Summit reminds tax professionals of simple steps to remember: Know your customers. Use the phone to confirm identities. And, don't take the bait. Thieves also seek to impersonate tax software providers, cloud storage providers banks and others. Remember, phishing emails generally have an urgent message, i.e. your account password expired, and direct you to a link or attachment. Taxpayers can report suspicious emails posing as the IRS to our *PHISHING mailbox at phishing@irs.gov. Watch out for IRS impersonation scams Don't forget security software For more help, the IRS and the Security Summit partners urge tax practitioners to review the security measures outlined in Publication 4557, Safeguarding Taxpayer Data.
Thank you for subscribing to the IRS Newswire, an IRS e-mail service. If you know someone who might want to subscribe to this mailing list, please forward this message to them so they can subscribe. This message was distributed automatically from the mailing list IRS Newswire. Please Do Not Reply To This Message. |
No comments:
Post a Comment