Crime & Safety

Scammers Stealing Tax Preparer Passwords, Warn IRS & CT DRS

The email phishing scam targets tax preparers with a fake "software update" claim.

Officials with the Connecticut Department of Revenue Services (DRS) and the federal Internal Revenue Service (IRS) are warning tax preparers to be on the lookout for "last-minute phishing email scams, especially those requesting tax preparers to perform tax software updates that steal passwords."

Connecticut DRS Commissioner Kevin Sullivan joined the IRS in issuing the warning, as tax preparers are the target of scammers throughout the year.

"Tax preparer-related scams happen throughout the year, not just during tax season," said Sullivan in a statement. "Cybercriminals are ever evolving and make use of sophisticated scams to try and trick tax professionals to get at personal information and passwords.

Find out what's happening in Darienfor free with the latest updates from Patch.

"Tax professionals should instill strong security measures to protect their clients and protect their business. This is the time of year when many software providers issue software upgrades."

Details of the scam, and steps to take to avoid it, are below:

Find out what's happening in Darienfor free with the latest updates from Patch.

The new email scam comes with a subject line of "Software Support Update" and highlights an "Important Software System Upgrade." It thanks recipients for continuing to trust the software provider to serve their tax preparation needs and mimics the software providers’ email templates.
The e-mail informs the recipients that due to a recent software upgrade, the preparer must revalidate their login credentials on a fictitious website that mirrors the software provider’s actual login page. The cybercriminals then use the stolen credentials to access the preparers’ accounts and steal the client’s tax information.
These types of phishing scams are why the Connecticut DRS, the IRS and the tax industry, acting as the Security Summit, launched the 10-week Don’t Take the Bait campaign currently underway. This awareness effort highlights the many tactics of cybercriminals as well as the steps tax professionals can take to protect their clients and themselves.
More information on how to report phishing or phone scams is available on IRS.gov or bycontacting DRS by calling (860) 297-5962 or outside the Hartford calling areas at (800) 382-9463.

Image via Shutterstock

Get more local news delivered straight to your inbox. Sign up for free Patch newsletters and alerts.