With the new year it is time to start thinking about taxes in the US. This is the perfect time to send out a reminder to anyone with access to employee or corporate tax information to be on the lookout for Tax Scams. A common scam that comes up every year is a Threat Actor sends an email pretending to be from the IRS asking for Tax information for employees. Other scams include phishing emails pretending to be from the IRS that lead to malware or fake websites that try to trick users into entering their credentials.
Microsoft has a threat intelligence report with examples they saw in 2024. (https://www.microsoft.com/en-us/security/security-insider/intelligence-reports/tax-season-cybersecurity-what-cybercriminals-want-and-who-they-target-most-is-it-you/)
The IRS also has a helpful website that lists all things the IRS will never do (https://www.irs.gov/newsroom/taxpayers-beware-tax-season-is-prime-time-for-phone-scams)
The IRS will never:
Call to demand immediate payment using a specific payment method such as a prepaid debit card, gift card or wire transfer. Generally, the IRS will first mail a bill to any taxpayer who owes taxes.
Threaten to immediately bring in local police or other law enforcement groups to have the taxpayer arrested for not paying.
Demand that taxes be paid without giving taxpayers the opportunity to question or appeal the amount owed.
Call unexpectedly about a tax refund.