111 Ways Taxpayers Can Keep Themselves Safe From Scams, Identity Theft
Tax time is like Christmas for cyber-criminals. Their potential victims are busily pulling together sensitive financial information from all kinds of online sources, and many are filing using one of the half-dozen or so web-based tax preparation services or electronic state or federal portals. In the rush to meet deadlines and avoid the ire of the taxman, consumers are especially vulnerable to scams and identity theft. In fact, the Internal Revenue Service often figuratively shudders and rolls its eyes when it hears that taxpayers have used an online tax preparation service because so many problems arise with users inputting their own information—let alone the security problems that are inherent in the process. In this eWEEK slide show, using industry information from Keeper Security, we offer 11 tips to keep yourself safe and sane this tax season.
2TIP 1: Update Protective Software
3TIP 2: Back Up Everything
Ransomware was the fastest-growing form of malware in 2016, and there are no signs that its momentum has slowed. Most ransomware encrypts all the data on your hard drive and demands a ransom payment to unscramble it. The only effective defense is to have a backup, so make sure all of your sensitive financial documents are stored in at least one other place, such as a cloud service or on a USB drive. Also, protect any sensitive data on your local storage media by saving it in an encrypted folder.
4TIP 3: Don’t Forget Physical Security
If your office is in a shared space, your security is only as good as the locks on the door. Store physical records in a safe or file cabinet with a good-quality lock. And don’t keep old tax records; the statute of limitations on back taxes is three years, although it may be as long as 10 years in some circumstances. Whatever the case, there’s no reason to keep those 2005 files around anymore. Shred them.
5TIP 4: Use Strong Passwords When Filing Online
This is no time to safeguard your account with passwords like “123456” or your telephone number. Choose a password of at least eight random alphanumeric characters, including upper- and lower-case, digits and punctuation marks. Most password managers will generate secure passwords for you and store them safely. If the tax preparation site offers two-factor authentication, use it. Be sure any online tax preparation service you use employs the secure “https” protocol. If you don’t see those characters at the beginning of the web address, your connection isn’t secure.
6TIP 5: Don’t Use Public WiFi When Working With Financial Information
7TIP 6: File Early
The IRS estimates it paid out nearly $6 billion in bogus refunds to identity thieves in 2013, and the real figure was probably higher. Tax identity theft is a growing problem. Any thief who has your Social Security number can file a false W-2 form and claim a refund in your name. Your filing then gets rejected, and you have to submit to a lengthy appeals process. It takes an average of 278 days to resolve a claim, and even then there’s no guarantee you’ll win. The best strategy is to file early, particularly if you suspect that your Social Security number has been compromised. That way crooks have a smaller window to scam you.
8TIP 7: Don’t Share Passwords, Even With Your Accountant
This isn’t about trust, but control. Even if your accountant is your best friend, there’s no guarantee he or she can’t get hacked. If you need to share documents, export them and store them in a secure online vault with sharing capabilities. It goes without saying that you never send passwords by email, right?
9TIP 8: Don’t Share Social Security Numbers
10TIP 9: Don’t Fall for Phishing Scams
Scammers love tax time because they know consumers are in a state of high anxiety about the potential for audits or fines. Phishing messages often contain alarming language or threats that are intended to scare recipients into giving up personal information. Any email that appears to be from the IRS and that asks you for personal information is a scam. The basic rules of phishing prevention also apply: Don’t click on links in email unless you’re absolutely sure of the identity of the sender.
11TIP 10: Monitor Your Filings for Suspicious Activity
12TIP 11: Don’t Fall for Fake IRS Phone Scams
Bad people posing as IRS agents are contacting innocent taxpayers to steal personal information, money and tax refunds. The IRS never calls taxpayers by phone to request personal information, tax information, credit-card numbers and money. If you get a phone call from an IRS impostor, tell them nothing and immediately hang up the phone. Then report the incident to the Treasury Inspector General at (800) 366-4484 or at http://www.tigta.gov. Thousands of taxpayers fall victim to fake IRS phone scams where the caller will demand immediate payment to release a tax lien or levy.