3 Lessons Learned During a Difficult Season

Protect yourself from these tax-related scams.

Tax-related scams have become increasingly common, and they happen year-round.  Fraudsters will contact you pretending to be from the Internal Revenue Service (IRS), a tax accounting service, or another tax-related agency.  You could receive fake emails, phone calls, letters, or other communications.

Be on high alert for phishing emails. Scammers are attempting to steal information such as tax IDs, account information, passwords, and other valuable data.  Be immediately suspicious of any unsolicited communication (email, text message, letter, or call) that asks you for your Social Security number, login credentials, or other personal information.

Review these helpful FAQs:

• Will the IRS contact me via email?

The IRS will never initiate contact with you via email, text messages, or social media with a request for personal or financial data. Be extremely careful with any unsolicited email that claims to be from the IRS.

• What should I do if I receive an email or text message claiming to be from the IRS or another tax service that asked for sensitive information?

Do not reply! Do not click on any links or download any attachments. Forward any IRS-related emails to phishing@irs.gov.

• What should I do if I discover a website claiming to be the IRS that I suspect is not legitimate?

Do not click on any links, download any files, or submit any information. Send the URL to phishing@irs.gov

• Are there any trusted resources I can use to identify email scams or websites claiming to be
  the IRS?

The IRS highlights examples of email scams and bogus websites. Find the information online at www.irs.gov/uac/Report-Phishing and https://www.irs.gov/newsroom/tax-scams-consumeralerts.

• What should I do if I receive an unsolicited phone call or letter claiming to be from the IRS that
  I suspect may not be legitimate?

Contact the IRS yourself to confirm any requests made via phone or letter, particularly those that are threatening or demand immediate payment. Visit www.irs.gov/uac/Report-Phishing for phone numbers and other tips.

• If I receive a suspicious tax-related email while at work, should I notify my company?

Yes! Report suspicious emails to IT. The IT team can help you determine if a message is legitimate. In addition to confirming requests for your personal data, you should verify any email that asked you to provide copies of W2 forms or your coworkers’ tax-related information.

Password managers are a key resource in maintaining your security. They allow you to keep track of your passwords and encrypt them before they leave your device. Some password vaults can also generate and change passwords for you in one click, as well as securely store other types of data like credit card information. Password managers may remind you to change passwords regularly, evaluate their strength, or scan the dark web to check if any of your logins appeared online. A password manager also makes sharing your data with family and friends safer.

When using a password manager, you’ll only need to remember one master password. Combine it with multi-factor authentication (MFA)and biometric authentication to increase your security.

While they can increase your security exponentially, even reliable password managers can’t keep you 100% safe online. Following are a list of possible risks and ways to mitigate them:

1. Not all devices are secure enough. Password managers can be hacked if your device is infected with malware. Users should invest in a trustworthy antivirus that will secure all devices first and reduce risks.
2. Not using biometric authentication. NordPass, RoboForm, and Keeper all offer a biometric authentication option, such as requiring a fingerprint or face scan which offers another level of protection.
3. Utilizing a Bad password manager. Not all password managers are created equal. Make sure the software you use does not lack the necessary security features to effectively protect your credentials at all times.
4. Forgetting your master password. Select a password manager that has a reset feature or store your master password in some physically secure place. Be sure to enable account recovery options.
5. Know what data is in your password manager. Be sure to know which accounts are stored in your password manager so in the case of a breach, you know which accounts to take action on, thus leaving the attacker with less time to cause more harm.

In a digital landscape where cyber threats are on the rise, using a password manager is a proactive measure that can overall protect your personal information and maintain robust online security. It simplifies the process of managing passwords, strengthens your defenses against unauthorized access, and provides peace of mind in an increasingly interconnected world. If you don't already, consider integrating a reputable password manager into your digital routine to enjoy the benefits of streamlined and fortified password security.