Important Information on W-2/SSN Data Theft Scam
Also note, IRS suggests that if your business received the email but did NOT fall victim to the scam, forward the email to the IRS. The IRS needs the email header from the phishing email for its investigation, which means you must do more than just forward the email to firstname.lastname@example.org. Here’s what to do with the W-2 email scam:
- The email headers should be provided in plain ASCII text format. Do not print and scan
- Save the phishing email as an email file on your computer desktop
- Open your email and attach the phishing email file you previously saved
- Send your email containing the attached phishing email file to email@example.com. Subject Line: W2 Scam. Do not attach any sensitive data such as employee SSNs or W-2s.
- File a complaint with the Internet Crime Complaint Center (IC3,) operated by the Federal Bureau of Investigation.