Tax pros: Beware of pandemic-related email schemes

Alfredo Gaxiola CPA in Houston

All tax pros need to beware of evolving phishing scams that use various pandemic-related themes to steal client data. It is the tax preparer's responsibility to secure their network to protect taxpayer data.

Tax pros, especially those who engage in remote transactions, remain vulnerable to identity thieves posing as potential clients. The criminals then trick practitioners into opening email links or attachments that infect computer systems.

The warning about these phishing scams comes as part of the IRS and its Security Summit partners annual summer campaign. This year's theme, Boost Security Immunity: Fight Against Identity Theft, urges tax pros to step up their efforts to protect client data.

Scams may differ in themes, but they generally have two traits:

• They appear to come from a known or trusted source, such as a colleague, bank, credit card company, cloud storage provider, tax software provider or even the IRS.
• They tell a story, often with an urgent tone, to trick the receiver into opening a link or attachment.

Fraudsters continue to impersonate pandemic-related government benefit programs to launch phishing campaigns. Pandemic-related scams may be delivered by email, social media, phone, or text, and may reference legitimate programs such as Economic Impact Payments. Instead of providing economic relief, these scams collect personal and financial information. Legitimate government programs will have corresponding information on their official government websites.

Phishing emails or SMS/texts - known as smishing - attempt to trick the person receiving the message into disclosing personal information such as passwords, bank account numbers, credit card numbers or Social Security numbers. Anyone with a smartphone is a potential target. Smishing scams may leverage the child tax credit or other pandemic-related tax-related programs to trick recipients into visiting phishing websites.

A specific kind of phishing email is called spear phishing. Rather than the scattershot nature of general phishing emails, scammers take time to identify their victim and craft a more enticing phishing email known as a lure. Scammers often use spear phishing to target tax pros.

In a reoccurring and very successful spear phishing scam, criminals pose as potential new clients, exchanging several emails with tax pros before following up with an attachment that they claimed was their tax information. Once the tax pro clicks on the URL or opens the attachment, malware secretly downloads onto their computer, giving thieves access to passwords to client accounts or remote access to the computer. Thieves then use this malware known as a remote access trojan to take over the tax professional's office computer system, identify pending tax returns, complete them and e-file them, changing only the bank account information to steal the refund. This scam remains popular as many tax pros continue to work remotely and communicate with clients over email versus in-person or over the phone because of COVID-19.

Tax pros should follow basic security steps to protect their accounts and client data. For example, using the two-factor or the multi-factor authentication option offered by tax preparation providers or storage providers would protect client accounts even if passwords were inadvertently disclosed. Keeping anti-virus software automatically updated helps prevent scams that target software vulnerabilities. Using drive encryption and regularly backing up files helps stop theft and ransomware attacks.

Source: IRS

Alfredo Gaxiola has worked on numerous IRS problem cases and has successfully settled with the IRS to release liens on houses, bank accounts and wages and, if needed, setting a payment installment plan that is not burdensome for the client. He has conducted appeals before the U.S. Tax Court and obtained favorable resolutions in reducing the tax debt of his clients. Mr. Gaxiola served as Treasurer of Camara de Empresarios Latinos, one of the largest and strongest Hispanic organizations in the city of Houston. He has conducted financial and accounting seminars for the Houston Small Business Development Corporation, as well.

Alfredo Gaxiola CPA in Houston

Certified Public Accountant in Houston, Alfredo Gaxiola CPA in Houston, Certified QuickBooks Proadvisor in Houston, QuickBooks Set Up and Training in Houston, Business Tax Return in Houston, Personal Tax Returns in Houston, Quarterly & Monthly Filings in Houston, Financial Statement Preparation in Houston, Consulting Services in Houston, Payroll Preparation in Houston, Bookkeeping Services in Houston, Bank Financing in Houston, IRS representation in Houston