From a joint National Cyber Security Alliance and Identity Theft Resource Center press release.
Tuesday, April 18, 2017, might feel a long way off, but the tax-filing deadline will be here before you know it. That means it’s primetime for cyber thieves and their devious online scams.
Tax identity theft, which occurs when someone uses your Social Security number to file a tax return and then steals your refund, is on the rise. According to the Federal Trade Commission (FTC), there was a nearly 50 percent increase in identity theft complaints in 2015, and by far the biggest contributor to the surge was the spike in tax refund fraud.
At this time last year, the Internal Revenue Service (IRS) reported a 400 percent increase in email phishing and malware incidents aimed at both taxpayers and tax professionals.
Cyber crooks are crafty: they can break into your account or device and literally steal your digital life – and your money.
The National Cyber Security Alliance (NCSA) and Identity Theft Resource Center (ITRC) have teamed up to share cautionary tips for spotting cyber tricks, proactive online safety steps and invaluable advice about how to get help if you fall victim to tax identity theft.
Don’t Become a Victim: Watch Out for Tax Season Tricks
Online outlaws will attempt to lure you in a variety of ways. Watch out for the following four scams:
1. Fraudulent tax returns:
The FTC recommends trying to file your tax return as soon as possible.
The IRS only accepts one tax return per Social Security number. If the file is yours and it’s in early, it makes it impossible for a cyber thief to submit another return with your personal information.
It’s also important to always use smart practices with your personal information. Remember to only share your Social Security number when it's absolutely necessary.
Check your credit report regularly for shady activity and never throw papers with critical information – like your Social Security number or bank account information – in the trash.
It’s best to shred all paper containing personal data.
2. Phishing and malware:
Cybercriminals will try to get you to do “something” so they can steal your personal information.
Watch out for unsolicited emails, texts, social media posts or fake websites that may prompt you to click on a link or to share valuable personal and financial information. Armed with this information, online thieves can pilfer funds and/or commit identity theft.
Also, unfamiliar links or attachments can contain malware ‒ viruses, spyware and other unwanted software that gets installed on your computer or mobile device without your consent – which can infect your computer files if opened.
3. Imposters claiming to be Internal Revenue Agents:
The IRS will never email or call you demanding immediate payment without having first mailed a bill. Nor will they ask for a credit or debit card number via email or phone.
4. Tax preparer fraud:
The overwhelming majority of tax preparers provide honest services, but some unscrupulous individuals may target unsuspecting taxpayers and the result can be refund fraud and/or identity theft.
The IRS reminds anyone filing a tax return that their preparer must sign it with their IRS Preparer Identification Number.
Stay Cyber Safe – Practice NCSA’s Tax Season Tips
National Cyber Security Alliance (NCSA) has eight easy-to-use STOP. THINK. CONNECT.™ tips to help protect you against fraudster tricks:
1. Keep all software up-to-date: Having updated software on all devices that connect to the Internet is critical. This includes security software, web browsers and operating systems for PCs and your mobile devices. Up-to-date software is a strong defense against viruses and malware that can steal logon credentials or potentially use your computer to generate spam.
2. Lock down your login: Your usernames and passwords are not enough to protect key accounts like email, banking and social media. Fortify your online accounts by enabling the strongest authentication tools available, such as biometrics like thumbprints, security keys, or a unique one-time code through an app on your mobile device.
3. Make better passwords: If your passwords are too short or easy to guess, it’s like giving a cyber thief your banking PIN. Longer passwords and those that combine capital and lowercase letters with numbers and symbols provide better protection.
4. Get savvy about Wi-Fi hotspots: Public wireless networks are not secure. Cybercriminals can potentially intercept Internet connections while you are filing highly personal information on public Wi-Fi.
5. When in doubt, throw it out: Links in email are often the way bad guys get access to your personal information. If it looks weird, even if you know the source, it’s best to delete.
6. Think before your act: Be leery of communications that implore you to act immediately – especially if you are told you owe money to the IRS and it must be paid promptly.
7. File your tax forms on secure https sites only.
8. Ask if your tax preparation service has checked for malware issues.
If You Think You’re a Victim…
Follow these six ITRC tips to get help as a victim of tax identity theft:
1. If you suspect identity theft: If you think you have tax issues related to identity theft, contact the IRS immediately, even if you don’t have any evidence that it has affected your tax return. You can call the IRS Identity Protection Specialized Unit (IPSU) at 1-800-908-4490.
2. File an ID Theft Affidavit: You can document the identity theft by submitting a police report and the IRS ID Theft Affidavit (Form 14039)
3. Contact your state tax organization: Your state taxes may be affected as well.
4. Document your case: Download the free ID Theft Help app from ITRC to track your case as you go through the resolution process.
5. File early: Get your tax refund before thieves do.
6. Call the ITRC: You can receive no-cost assistance from a victim advisor by calling 888.400.5530.