IRS Warns of W-2 Phishing Scam

The IRS is warning employers of a particularly dangerous email scheme now circulating called a “business email compromise” or “business email spoofing.” The scheme involves a cybercriminal sending an email that appears to be from a company executive. The email is sent to an employee in the company’s payroll or human resources department, requesting a list of all employees and their W-2 forms.

Businesses that lost data as a result of an email scam should notify the IRS as quickly as possible after the loss. If notified soon enough, the IRS may be able to take steps to protect employees from tax-related identity theft.

Employers and/or payroll professionals falling victim to a W-2 scam should email the IRS at [email protected]. Use the subject line “W-2 Data Loss” and include the following information:

  • Business name.
  • Business employer identification number.
  • Associated with the data loss.
  • Contact name.
  • Contact phone number.
  • Summary of how the data loss occurred.
  • Volume of employees impacted.

More information about tax scams and consumer alerts is available on the IRS website.