The Internal Revenue Service, state tax agencies and the tax industry today warned tax professionals to be alert to a new phishing email scam impersonating software providers.
The scam email comes with the subject line, “Access Locked.” It tells recipients that access to their tax prep software accounts has been “suspended due to errors in your security details.” The scam email asks the tax professional to address the issue by using an “unlock” link provided in the email.
However, the link will take the tax professional to a fake web page, where they are asked to enter their user name and password. Instead of unlocking accounts, the tax professionals actually are inadvertently providing their information to cybercriminals who use the stolen credentials to access the preparers’ accounts and to steal client information.
The Security Summit partners remind tax professionals to never open a link or an attachment from a suspicious email. These scams can increase during the tax season.
For tax professionals who receive emails purportedly from their tax software providers suggesting their accounts have been suspended, they should send those scam emails to their tax software provider. For Windows users, please this process to help the investigation of these scam emails:
- Use “Save As” to save the scam. Under “save as type” in the drop down menu, select “plain text” and save to your desk top. Do not click on any links
- Open a new email and attach this saved email as a file
- Send your new email containing the attachment your tax software provider, as well as copy Phishing@IRS.gov.
- Fake CEO phishing tax scam is back (dontmesswithtaxes.com)
- W-2 Phishing Scams: What You Need to Know to Stay Secure (business2community.com)
- TurboTax® – Taxpayer Beware: Email Phishing Scams (turbotax.intuit.com)
- Tax Time Scams You Should Avoid (turbotax.intuit.com)
- Guide to IRS Form 14039: Identity Theft Affidavit (turbotax.intuit.com)
- A programmer came up with a hilarious way to shut down dangerous Windows scammers (businessinsider.com)
- Phishing Season: TurboTax Tips to Help You Avoid Being Lured into Identity Theft (turbotax.intuit.com)
- Shopping for W2s, Tax Data on the Dark Web (krebsonsecurity.com)