Beware of the Latest Email Scam Targeting Businesses

In today’s digital age, scams are constantly evolving, and we’re seeing a new variant of an old trick. Here’s a scenario that recently unfolded:

A secretary receives an email from her boss, who is traveling, urgently requesting scanned copies of all the W2s the company issued at the end of January. The email appears legitimate, complete with what looks like her boss’s actual email address when viewed in Outlook.

However, the secretary becomes suspicious. She had just spoken to her boss on the phone that morning, and he never mentioned needing that information. Trusting her instincts, she decides to text her boss to verify the request before collecting the W2 PDFs from the HR drive.

Great catch!

The boss confirms that he never requested that information. Had she not been proactive and instead completed the task, she would have handed over all the confidential information on the federal W2 forms for every employee in the company to a scammer! The scammer could have used this information to commit identity theft or file false tax returns next year to claim refunds.

This incident highlights the importance of always being vigilant and proactive. It’s better to be suspicious and double-check everything when dealing with confidential information. Here are some tips to protect yourself and your company:

• Verify Requests: Always verify unusual or unexpected requests for sensitive information, especially if they come via email.
• Use Encryption: Provide sensitive details in an encrypted email or, at the very least, protect files with a password (and don’t include the password in the body of the email!).
• Stay Informed: Keep yourself and your team informed about the latest scams and phishing tactics.

Taking a few extra minutes to verify requests can save months of heartache for you and your employees.

Stay safe and vigilant!

______________________________________________________________________________