Learning Center
We keep you up-to-date on the latest tax changes and news in the industry.
Defending Your Identity: Navigating Tax Season Scams and Fraud Prevention
Tax season represents a period of intense activity for both taxpayers and financial professionals. At Robert J. Digilio CPA PC, we view this time as the annual marathon of financial health. Unfortunately, it is also the peak season for cybercriminals who sharpen their tactics to deceive individuals into surrendering sensitive personal data. Identity thieves leverage this stolen information to submit fraudulent tax returns and intercept refunds, creating a cascade of financial complications that can take years to resolve.
You might notice that we emphasize identity theft protection frequently during our tax planning sessions. This is because reclaiming your financial identity is an exhausting, multi-year process. Scammers are increasingly sophisticated, often operating with the persistence of a full-time business. They only need you to overlook a single red flag once to compromise your Social Security number and financial standing. For our clients in Tewksbury and the Wilmington area, staying vigilant is as essential as gathering your W-2s and 1099s.
The Psychology of the Scam: Awareness is Your First Defense
Fraudsters often masquerade as the IRS or the U.S. Department of the Treasury to lend an air of unearned authority to their communications. They use official logos, mimic government web designs, and adopt a clinical, authoritative tone to convince you that their outreach is legitimate. By posing as a trusted institution, they aim to lower your guard.
In a typical identity theft scheme, the perpetrator attempts to trick the victim into revealing high-value data, including credit card credentials, bank account passwords, and Social Security numbers. Once obtained, this data is used to hijack existing financial accounts, open new lines of credit, or claim government benefits in your name. Perhaps most frustratingly, they may file a fraudulent tax return before you do, causing the IRS to reject your legitimate filing.
These scams usually arrive via mail, fax, email, or increasingly, via text messages and phone calls. When these attempts are made through digital channels, they are known as phishing or smishing.
Why Seniors Are Frequent Targets
Scammers frequently focus their efforts on individuals over age 65 or those approaching retirement. These individuals often have established retirement accounts and may be perceived as more trusting of official-sounding communications. The financial stakes are particularly high for this demographic; if a victim is coerced into withdrawing tax-deferred retirement funds to pay a scammer, those funds may be treated as a taxable distribution. This results in an immediate income tax liability and, if the owner is under age 59½, potential early withdrawal penalties.
While it is sometimes possible to claim a theft loss deduction, the process is incredibly complex and recovery is rarely guaranteed. We encourage our clients to maintain regular dialogue with elderly family members regarding suspicious messages. Empowering them with knowledge about current scam tactics is one of the most effective ways to protect their hard-earned wealth.
Identifying the Red Flags of Fraud
Modern phishing and smishing attempts are designed to bypass your logical reasoning by triggering a sense of urgency. They may claim you are in immediate legal trouble, that your account has been compromised, or that a significant prize is waiting for you. If a communication demands immediate action or payment—especially via unconventional methods like gift cards—it is almost certainly a scam.
Signs of a Phishing Email
- Excessive Data Requests: Any email asking for your mother’s maiden name, bank account passwords, or your full Social Security number is a major red flag.
- Tempting Bait: Be wary of offers to participate in an "IRS survey" for payment or notifications of an unexpected "special refund."
- Threatening Language: Scammers often threaten arrest, deportation, or the permanent freezing of your assets to force a quick response.
- Inaccuracies and Poor Grammar: Many scams originate from international groups; look for awkward phrasing, misspelled agency names, or general grammatical errors.
- Suspicious Links: Before clicking any link, hover your mouse over it to reveal the actual URL. If the address does not begin with www.irs.gov, do not click it.
- Sender Address Discrepancies: Check the sender’s email address carefully. A single missing letter or an unusual domain extension (like .net or .org instead of .gov) indicates a fraudulent source.
Common Digital Tactics: Phishing and Smishing
The goal of these digital attacks is often to install malware on your device or lead you to a mirrored website that looks identical to the official IRS portal.
Email Scams to Watch For:
- The Phony Refund: An email claiming you are eligible for a large, undisclosed refund that requires a link click to process.
- Legal Threats: Messages alleging you have committed tax fraud and must call a specific number to avoid immediate arrest.
- Underreported Income: A fake notice claiming you underreported earnings, with a "tax statement" attachment that contains malicious software.
- Account Updates: Urgent requests to update your "IP PIN" or online account via a spoofed link like "IRSgov" (missing the dot).
Text Message (Smishing) Scams:
- Account Holds: Alerts claiming your IRS online access has been restricted due to "unusual activity."
- Economic Payments: Texts promising stimulus checks or other government assistance in exchange for personal details.
- Immediate Callbacks: Messages that provide a phone number to resolve a "pressing issue," which leads directly to a scammer’s call center.
Actionable Steps to Protect Your Information
The best way to handle a suspicious communication is to disengage immediately. The IRS does not initiate contact via email, text, or social media to request personal or financial data. Here are the steps you should take to secure your identity:
- Never Click: Avoid opening attachments or clicking links in unsolicited tax-related messages.
- Know the Payment Rules: The IRS will never demand a specific payment type (such as wire transfers, cryptocurrency, or gift cards) or threaten to involve law enforcement over the phone.
- Verify Independently: If you receive a notice and are unsure of its validity, contact the agency using the official phone numbers found on the IRS website or log in to your secure account at IRS.gov.
- Report the Fraud: Forward phishing emails to phishing@irs.gov. For text scams, forward the sender information and message content to the same address with "Text" in the subject line.
- Use an Identity Protection PIN (IP PIN): We highly recommend that our clients obtain an IP PIN. This is a unique six-digit number assigned annually by the IRS. It serves as a rigorous authentication tool; without it, the IRS will automatically reject any electronically filed return using your SSN.
If you have been a victim of identity theft in the past, you are likely already enrolled in the IP PIN program. However, any taxpayer who can verify their identity is eligible to opt-in voluntarily through the IRS Get an IP PIN tool.
The Rise of Social Media Misinformation
In addition to direct scams, misinformation regarding tax credits and refunds is rampant on social media platforms. Influencers without formal tax training often promote "hidden" tax loopholes or encourage followers to falsify information to maximize refunds. Following this advice can lead to severe consequences, including audits, substantial penalties, and potential criminal charges. Furthermore, these misleading posts are often used as lead generation for scammers who offer "help" with these fraudulent claims to steal your personal data.
Conclusion
Remember that the primary method of communication for the IRS remains the U.S. Postal Service. They will not reach out to you on Facebook, via text, or through an unsolicited email to discuss your private financial matters. At RobD CPA, we are dedicated to helping our neighbors in Tewksbury and Wilmington navigate these complexities safely. If you receive a suspicious communication or want to discuss proactive tax planning and identity protection, please contact our office today to schedule a consultation.
To further bolster your defenses, it is important to look beyond individual phishing attempts and understand the broader landscape of systemic tax fraud. The IRS frequently updates its Dirty Dozen list to reflect emerging threats that target both individual taxpayers and the professional tax community. One of the most persistent issues involves what are known as ghost preparers. Unlike the dedicated team at Robert J. Digilio CPA PC, ghost preparers operate in the shadows. They refuse to sign the tax returns they prepare, which is a direct violation of federal law. By not signing the return or providing a valid Preparer Tax Identification Number (PTIN), these individuals shift all the legal and financial responsibility onto the taxpayer while often charging fees based on a percentage of an artificially inflated refund. If a preparer suggests claiming unusual deductions or credits without documentation, or if they refuse to sign your filing, you should immediately seek a second opinion from a reputable professional in the Tewksbury area.
The Dangers of Offer in Compromise Mills
Another sophisticated scheme involves promoters who claim they can settle your tax debts for pennies on the dollar through the IRS Offer in Compromise (OIC) program. While the OIC is a legitimate IRS program for those who truly cannot pay their tax liabilities, these promoters—often called OIC mills—charge massive upfront fees for a service they know the taxpayer does not qualify for. They use aggressive marketing to lure in vulnerable individuals who are struggling with tax debt. In reality, the IRS has very strict eligibility requirements for the OIC program. A qualified advisor will conduct a thorough analysis of your financial situation before recommending an OIC, whereas a scammer will promise results before even seeing your financial statements. Protecting your assets requires a realistic assessment of your situation, not the empty promises of a late-night television advertisement.
Protecting Business Operations from Corporate Identity Theft
For the small business community in Wilmington and surrounding towns, corporate identity theft is a growing concern. Scammers may attempt to file fraudulent business returns or change the address of record for a business to divert refunds or correspondence. One particularly damaging tactic is the W-2 phishing scam. In this scenario, a fraudster sends an email to a payroll or human resources employee that appears to come from the company’s CEO or another high-ranking executive. The email urgently requests a PDF of all employee W-2 forms, ostensibly for an immediate review or audit. If the employee complies, every person in the organization becomes a victim of identity theft overnight. We recommend that local businesses establish a strict protocol for the transmission of sensitive data, requiring verbal or multi-factor authentication before any bulk employee information is released.
Addressing the Employee Retention Credit (ERC) Misinformation
In recent years, the Employee Retention Credit has been a significant focus for fraudulent activity. Promoters have flooded the market with claims that almost any business qualifies for this pandemic-era tax credit. These groups often ignore the complex eligibility rules regarding government orders and gross receipts tests. When the IRS eventually audits these claims, the business owner is left holding the bill for the repaid credit, interest, and penalties, while the promoter has vanished with their contingency fee. We emphasize to our clients that if a tax opportunity sounds too good to be true, it likely is. Relying on established professional standards ensures that your tax planning is both effective and compliant with current regulations.
Comprehensive Recovery Steps Following an Identity Breach
If you find yourself in the unfortunate position of having your identity compromised, the path to recovery involves several critical steps. Beyond contacting your financial institutions, you must file an Identity Theft Affidavit, known as Form 14039, with the IRS. This document officially notifies the government that your Social Security number is at risk. Additionally, you should consider placing a security freeze on your credit reports with the major bureaus. This prevents new accounts from being opened in your name without your explicit permission. Recovering from identity theft is a marathon, not a sprint, and having a trusted advisor to guide you through the paperwork and communication with tax authorities can provide significant peace of mind during a stressful time.
Want our best tax and accounting tips and insights delivered to your inbox?
Sign up for our newsletter.