Internal Revenue Service officials yesterday issued an alert to payroll professionals regarding a new phishing scam. Professionals are being targeted with phony requests for payroll records, W-2 Forms and personal data.
Most importantly, the requests appear to be official, coming from an officer of the teams’ own companies. Since the information requested usually contains Social Security numbers, extreme caution should be exercised at all times. A legitimate request will come from identifiable sources, and the professional should always know how to respond.
Don’t ever give out Social Security numbers. Even if you receive a legitimate request, use another identifier, or ensure that the numbers are masked (e.g. xxx-xx-2345). Ensure that your company’s policy on information sharing is clear and protects both you and your employees.
Read more about the alert here.