Get Started: FBI warns of spreading W-2 email theft scheme

The IRS is warning businesses about a sharp increase in email phishing scams involving employees' W-2 forms—scams that can put staffers' Social Security numbers and other critical information in the hands of thieves.

The government said 200 businesses, , universities, Native American governments and nonprofits were victimized by these scams during this year's tax filing season, resulting in the theft of several hundred thousand employees' data. That's up from 50 in 2016, when the scam first appeared.

Cyberthieves perpetrate the scams by sending emails that appear to come from executives inside the targeted organizations. The emails ask payroll or human resources departments to reply with a list of all employees and their W-2 forms. Some emails also ask companies to transfer money to a specified bank account.

Companies should be on alert for anyone asking for employees' W-2 forms or for wire transfers of money.

The IRS has an email notification address specifically for businesses and organizations to report W-2 thefts: Be sure to include "W-2 scam" in the subject line. Businesses and organizations that receive a suspicious email but haven't been victimized should forward it to, also with "W-2 " in the subject line. Anyone victimized should also contact the FBI's Internet Crime Complaint Center through its website, .

The IRS also has suggestions for avoiding being victimized:

—If you get a suspicious email, pick up the phone and call the person who purportedly sent it, using a phone number you can verify as theirs, not one that might be contained in the email. Confirm that this person has in fact made the request.

—Make sure that any employees with access to W-2s or other sensitive information are aware of these scams. Make sure they know the warning signs of phishing scams, including incorrect email addresses.

—Invest in software that will flag suspicious emails.


A company's workflow—what happens to an order after it's received or a project when it is started—is critical to its success. SCORE, the organization that gives free counseling to small companies, is sponsoring an online seminar to help owners learn more about their business processes and how to analyze and improve them. It will be held Thursday, Aug. 24 at 2 p.m. Eastern time. You can learn more and register at: .

© 2017 The Associated Press. All rights reserved.

Citation: Get Started: FBI warns of spreading W-2 email theft scheme (2017, August 21) retrieved 4 March 2024 from
This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no part may be reproduced without the written permission. The content is provided for information purposes only.

Explore further

IRS warns firms, beware of phishing email scam


Feedback to editors