When it comes to ID theft, you really can’t afford to relax – the criminals who are out to get you certainly aren’t slacking off: In 2014, there was a new identity fraud victim every two seconds. In the same year, $16 billion was stolen from 12.7 million U.S. consumers. (See III on the Scope of Identity Theft).
Between January and April, IRS impersonators and tax scammers are out in full force. Scams often happen via aggressive phone calls, email phishing and spam, phony online websites, or even via social media. Some of the common scam pitches to watch out for:
Get a bigger return and get it faster … just click or sign here
You need to update your online file .. give us your Social Security number
This is the IRS. You owe big bucks in back taxes – pay now or we’ll arrest you
You owe a small amount in taxes or fees, here’s a quick way to pay that online so you don’t hold up your refund
Please make a tax-free donation to <> charity or <> political fund.
Two particularly common types of fraud are IRS Impersonators – usually threats by phone – and tax preparer scams. You can read about the most common types of tax fraud from last year’s IRS Dirty Dozen.
Thieves usually claim tax refunds by filing taxes before their victims do. So another way to protect yourself is to file long before the tax deadline, which is Monday, April 18, this year (April 19 in Maine and Massachusetts).
Here are some other tips to avoid becoming an ID-theft victim:
Don’t trust the number that shows up on your caller ID or email identification. These can be spoofed. Don’t click on any links or give out any info. Instead, go directly to the website or call the organization yourself to make payments or donations.
Don’t give out credit cards, dates of birth, social security numbers or any other sensitive information to callers you do not know. Never send that information by email, which is insecure.
Create secure passwords. Use different passwords for any accounts involving sensitive information or payments. That might seem like a hassle, but this small inconvenience pales in comparison to the troubles you will have if someone steals your ID.
Review your credit card and bank statements regularly. Check free credit reports annually with this authorized site.
Avoid making financial transactions over insecure public wifi networks.
Ensure that your browser is up to date and security patches applied.
Keep an eye out for elderly relatives or friends – the elderly are often specifically targeted for fraud.
You may be dreading tax season but there are some folks who couldn’t be happier: criminal cartels. They are hoping to intercept your tax rebate, to con you into paying fake fines or to steal your identity. They have an increasingly sophisticated arsenal of tricks: phony emails, texts, websites and phone scripts. It’s a big business because, sadly, there is no shortage of victims. Read the The 2013 Dirty Dozen Tax Scams, an IRS-issued list of the most common tax scams last year.
What are common fraud warning signs?
Threats and promises. Any messages via email, text or phone that include scary threats, that demand immediate action or that promise refunds, rebates or winnings should be immediate red flags.
Requests for personal information. The IRS does not send any communication requesting your PIN numbers, passwords or similar access information for credit cards, banks or other financial accounts. Do not give this information to phone callers either.
Email with links and attachments. Scammers are good at creating email that looks “official.” Do not open links or attachments from people you don’t know. Get in the habit of hovering over email links to reveal the real address before clicking because the apparent link may not lead where it says.See How to Tell if a Link Is Safe Without Clicking on It.
Be skeptical about emails. Look for misspellings and bad grammar. One trick you can use is to copy a paragraph of a suspicious email into the Google search box – it will often reveal that many people got the same email and point to a number of alerts that the mail is a fraud. You can also check the IRS Consumer alerts.
It’s that time of year again … it’s so predictable you could almost set your watch by it: Tax season email scams. Thieves are pretty smart and can create a convincing-looking phony email – don’t fall for their traps. Clicking on a phony or “phish” mail could result in a computer virus, lost money, or a stolen identity. And guess what? It’s not just computer newbies who fall for these scams: smart, experienced people can be tricked too. First rule of thumb, right from the IRS:
The IRS does not initiate contact with taxpayers by email to request personal or financial information. This includes any type of electronic communication, such as text messages and social media channels.
All unsolicited email claiming to be from either the IRS or any other IRS-related components such as the Office of Professional Responsibility or EFTPS, should be reported to firstname.lastname@example.org.
Here’s a guide from the IRS with more information about recognizing and reporting phishing and other fraudulent solicitations. Second rule of thumb: Never send sensitive financial information via email – it is not secure. This includes social security numbers or PIN numbers, passwords and other access information for credit cards, banks or other financial accounts. Third rule of thumb: If you get an email request to update your password or to enter an account number, password, or other identifiable information, DO NOT click on a link or reply. Instead, go directly to the site of the organization that is asking for the update and sign in to your account. If there is a request for updated information, you will find it there. Fourth rule of thumb: Never enter any financial or account information on a site unless you are sure it is secure. How can you tell? Look for the “s” – most websites are preceded by http:// – secure websites use https:// – that one little letter makes all the difference. Most browsers will also show a little icon of a padlock right in the address bar beside the web address. You can’t always trust a web page graphic promising security since these can be faked – look for the website address and the padlock in the address bar.
For more, see our past posts: How Can I Securely Send Sensitive Tax Docs to My Tax Preparer? Don’t get hooked by tax-time phishing!
The IRS isn’t the only one out to get your money this time of year. Unfortunately, this is the season for tax scam schemes, including the perennial favorite, email phishing. Email phishing, for the uninitiated, is a term referring to scam emails that take on the look and feel of an e-mail from legitimate corporations, trying to trick you into clicking on a link and entering your personal information. Sophisticated phishers can look exactly like legitimate emails if you don’t know what to watch out for, and their links can lead you to ages that look remarkably like the real thing.
Phishing schemes have been around since the birth of the internet; they’re the latest technological spin on a very old phone scam in which con artists called unsuspecting citizens asking for social security or credit card numbers. Just like the phone scam, the best way to react to a phishing email is to hang up: delete the email, don’t click on anything and move on to the rest of your day. If you’d like to be a good citizen, you can forward the phishy email to email@example.com.
How serious is email phishing this time of year? The IRS puts it at the top of their “dirty dozen” list of tax scams. That means that it’s incredibly common. You may well be the recipient of an unwanted tax scam phishing email this year. If you don’t get one and want to know what they look like, Snopes.com, the well known rumor debunking site, has examples of a variety of tax phishing emails. (alert: Snopes site has popup ads).
How can you tell that an email is phishing? First, disregard any email that claims to be from the government. The IRS will never contact you by email or through any social media like Facebook or Twitter. This has been a policy for many years and it’s unlikely to change. Therefore, if you receive any communication from the IRS in any other way besides mail, you can safely assume that it’s faked.
Not all tax phishing emails purport to come from the IRS, though. Popular tax preparers H & R Block and Intuit, the makers of the well known tax software TurboTax, are also reporting phoney emails being issued supposedly under their name. Click links for their safety tips to protect against phishing). In a slightly different twist, H & R Block customers in Tennessee were even scammed by fake text messages. Just as in an email or phone call, texts that claim to be from tax entities should be ignored and reported. Remember, no reputable company other than your mobile phone carrier is going to contact you via text message. Intuit has an up to date list of current phishing scams on their website, so if you use TurboTax and receive any emails from them, check this list before replying or clicking on attachments.
To be safe, never click on an email attachment from anyone you don’t know and make sure that any emails, even from friends, are really from them before you click. Always, always, think before you click. To use an example from my own email inbox, is it really likely that your old college friend is stranded in London without any cash and chose you to ask for a loan? If it looks suspicious, it probably is – and my friend was still in South Carolina.
Here’s a good rule of thumb: If you get an email from your bank, your tax preparer, or an online merchant with an urgent request about your account, don’t click the link in the email: instead, go directly to the bank or merchant website and sign in the way you normally would. If there is any urgent message, it will be listed under your account.
Everyone’s favorite time of year, tax deadline, is rapidly approaching. While there are still a few weeks left before it’s time to get out the balloons and party hats, it’s always a good idea to be over rather than under prepared for your yearly taxes. As you’re thinking about the past year, make sure to consider any property losses you may have incurred in 2011. Many people up and down the East Coast suffered losses due to Hurricane Irene, which was by most estimates one of the top ten most destructive and deadly hurricanes to hit the United States since 1980. Irene was a tragedy, but the silver lining is that according to the IRS, losses may well be deductible.
Keeping the terminology clear may help you understand which losses are deductible and which are not. Remember, a casualty occurs when your property is damaged as a result of a disaster such as a storm, fire, car accident or similar event. A theft occurs when somebody steals your property. A loss on deposits occurs when your financial institution becomes insolvent or bankrupt. Any losses incurred as a result of hurricane damage are considered casualties, particularly since Hurricane Irene was one of the many federally recognized disasters in 2011.
However, while losses are deductible, it’s important to know that if you have insurance, you must have filed a timely insurance claim. Any reimbursement you received from insurance must be taken into account and subtracted when figuring your loss. This includes any expected reimbursement even if you have not yet received it. This booklet on Casualties, Disasters & Theft from the IRS (PDF) will help you decide if the casualty, loss and theft deductions apply to you.
Taxes are never fun, but being prepared for all eventualities helps whether the disaster is a hurricane or a Form 1040. Make sure your accountant is aware of any losses you may have suffered in 2011.