Scammers were very successful last year with a scheme to snatch W-2 pay stub data from employers. The IRS is warning that it may be one of several techniques scammers utilize this year.
How the W-2 Scam Works
Fraudsters simply identify employees with access to company payroll data and pretend to be a fellow employee emailing from an outside address. “Hi, I work in accounting. Do you think you could send me the payroll data on file? I’m traveling today and working on preparing my 2017 tax return.”
The IRS said this surprisingly simple tactic worked on more than 200 employers last year and compromised the W-2 information of hundreds of thousands of employees. The stolen data included names, addresses, Social Security numbers, income and withholdings. Scammers then used the data to file returns and claim refunds from the employees' tax withholdings.
If you’re an employee, it’s hard to defend against this kind of scam because the breach happens to your employer. If you file and get an IRS notice that a return has already been filed in your name, you’ll know you’re a victim.
How to Minimize Your Risk
If your refund was nabbed by a scammer, the good news is that the IRS will still eventually send you a replacement refund. The bad news is it can take a very long time—six months to a year or longer—for the IRS to investigate your case.
If that doesn’t sound appealing, know that there are a few things you can do to minimize your risk: