{"id":4332,"date":"2017-02-17T09:16:05","date_gmt":"2017-02-17T14:16:05","guid":{"rendered":"https:\/\/gtm.com\/business\/?p=4332"},"modified":"2024-08-30T11:14:06","modified_gmt":"2024-08-30T15:14:06","slug":"irs-phishing-scam-targets-payroll-hr","status":"publish","type":"post","link":"https:\/\/gtm.com\/business\/irs-phishing-scam-targets-payroll-hr\/","title":{"rendered":"Phishing Scam Targets Payroll and HR"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-large wp-image-4333\" src=\"https:\/\/gtm.com\/business\/wp-content\/uploads\/hacker-1952027_1280-1024x597.jpg\" alt=\"phishing scam targets payroll and HR\" width=\"1024\" height=\"597\" srcset=\"https:\/\/gtm.com\/business\/wp-content\/uploads\/hacker-1952027_1280-1024x597.jpg 1024w, https:\/\/gtm.com\/business\/wp-content\/uploads\/hacker-1952027_1280-300x175.jpg 300w, https:\/\/gtm.com\/business\/wp-content\/uploads\/hacker-1952027_1280-1080x629.jpg 1080w, https:\/\/gtm.com\/business\/wp-content\/uploads\/hacker-1952027_1280.jpg 1280w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/>Last spring,<a href=\"https:\/\/www.irs.gov\/uac\/newsroom\/irs-alerts-payroll-and-hr-professionals-to-phishing-scheme-involving-w2s\" target=\"_blank\" rel=\"noopener\"> the IRS issued a warning<\/a> about an emerging email scheme where the scammer purports to be a company executive and requests personal information about employees \u2014 often in the form of W-2s or payroll records.\u00a0This\u00a0troubling phishing scam targets payroll and HR departments, and has once again been particularly prevalent this tax season.<\/p>\n<p>The IRS gave examples of what the emails might say:<\/p>\n<ul>\n<li>Kindly send me the individual W-2 (PDF) and earnings summary of all W-2 of our company staff for a quick review.<\/li>\n<li>Can you send me the updated list of employees with full details (name, SSN, date of birth, home address, salary).<\/li>\n<li>I want you to send me copies of employees\u2019 W-2 wage and tax statements for 2016 . I need them in PDF file type; you can send it as an attachment. Kindly prepare the lists and email them to me asap.<\/li>\n<\/ul>\n<p>The scammers then attempt to use the information to file fraudulent tax returns and engage in other criminal activity. For employers, a successful scam can be a costly data breach with legal consequences. For example, if an email account is hacked or accessed by an outside party, everything in the email account might be accessible to cyber criminals.<\/p>\n<p>One of the best ways to protect your company from these sorts of scams is to have a policy and practice of never emailing sensitive employee information. The language below may be an effective reminder:<\/p>\n<p><em>\u201cEmployees should not under any circumstance email sensitive employee information such as W-2s, benefit enrollment forms, completed census forms, or anything with social security or credit card numbers. Email is inherently insecure, and scammers may pose as company executives or employees to steal information. If you receive a request to email any such sensitive information, do not respond to it. Instead, inform your manager immediately.\u201d<\/em><\/p>\n<p>Businesses are generally required to take reasonable precautions to protect personal information in their possession. In the event of a breach, many states require that notice be given to those whose information was compromised. This notice might need to include the cause and nature of the data breach as well as what protections are afforded to those affected.<\/p>\n<p>Because GTM\u00a0firmly believes in protecting our clients and partners and their confidential information, our entire staff undergoes quarterly security trainings designed to enable our employees to recognize phishing emails or otherwise illegitimate communications, giving our clients peace of mind that their data remains secure. Please <a href=\"https:\/\/gtm.com\/business\/contact-gtm\/\" target=\"_blank\" rel=\"noopener\">contact us<\/a> for more information.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>An emerging email scheme where the scammer purports to be a company executive and requests personal information about employees is occuring this tax season. This troubling phishing scam targets payroll and HR departments. <\/p>\n","protected":false},"author":7,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[266],"tags":[104,26],"post_folder":[],"class_list":["post-4332","post","type-post","status-publish","format-standard","hentry","category-consulting-services","tag-data-security","tag-irs"],"_links":{"self":[{"href":"https:\/\/gtm.com\/business\/wp-json\/wp\/v2\/posts\/4332","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gtm.com\/business\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gtm.com\/business\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gtm.com\/business\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/gtm.com\/business\/wp-json\/wp\/v2\/comments?post=4332"}],"version-history":[{"count":3,"href":"https:\/\/gtm.com\/business\/wp-json\/wp\/v2\/posts\/4332\/revisions"}],"predecessor-version":[{"id":9687,"href":"https:\/\/gtm.com\/business\/wp-json\/wp\/v2\/posts\/4332\/revisions\/9687"}],"wp:attachment":[{"href":"https:\/\/gtm.com\/business\/wp-json\/wp\/v2\/media?parent=4332"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gtm.com\/business\/wp-json\/wp\/v2\/categories?post=4332"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gtm.com\/business\/wp-json\/wp\/v2\/tags?post=4332"},{"taxonomy":"post_folder","embeddable":true,"href":"https:\/\/gtm.com\/business\/wp-json\/wp\/v2\/post_folder?post=4332"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}