Just because tax season is over doesn’t mean the scammers have packed up and left, especially against small businesses.
In fact, the IRS is sounding the alarm on scams: small businesses and taxpayers are still very much in the crosshairs of fraudsters. As part of National Small Business Week, the IRS is urging everyone, especially business owners, to stay vigilant against tax scams that continue to circulate all year long.
According to the IRS, many of the scams highlighted in their annual Dirty Dozen list remain active and dangerous. These schemes include everything from fake client emails and spear phishing to bogus charities and bad tax advice spreading like wildfire on social media. Even false credit claims are trending again. The agency warns that just because the April 15 deadline has passed, it doesn’t mean the threat has.
One of the most dangerous traps businesses fall into involves fake W-2 requests. Scammers will pose as executives or HR representatives asking for employee information, which is then used for identity theft or fraudulent tax filings. The IRS stresses that now, more than ever, it’s critical to implement strong data protection measures.
That means installing anti-malware and antivirus software with real-time updates, creating strong passwords, and using multi-factor authentication for key business accounts. It’s also essential to only input sensitive information on websites that are secure (always look for “https” in the URL). These simple steps can help prevent massive damage down the line.
Another red flag? Your Employer Identification Number (EIN). That number is the identity of your business. The IRS is urging business owners to treat it like gold: keep it secure, keep it up to date, and don’t ignore changes that need to be made. If any updates are needed, Form 8822-B is your go-to. Failing to update your EIN can leave your business exposed to identity theft or fraudulent activity under your name.
As we move into disaster season, the risk of scam activity actually spikes. Whenever natural disasters strike, criminals often pretend to be IRS agents offering help with casualty loss claims or other tax relief programs. These fraudsters might show up via email, phone, or even in person. The IRS says you should only trust official communication, and if you’re unsure, call the IRS disaster assistance hotline at 866-562-5227 to speak to a real representative.
The IRS is also stressing the importance of employee education. Staff should be trained to recognize phishing emails, spoofed domains, and urgent messages that try to scare them into clicking malicious links or giving up sensitive data. The IRS offers a resource hub, Identity Theft Central, which includes guides and publications to help train your workforce on staying safe.
And if you’ve already been targeted or think you’ve spotted a scam, don’t keep it to yourself. There are direct ways to report it:
-
- Email suspicious messages to [email protected].
- If your business experienced a W-2-related data breach, notify [email protected].
- And if employee identity info was exposed, alert the states at [email protected].
Bottom line: Scammers aren’t seasonal, and neither should your security measures be. Whether it’s phishing, fraudulent refund claims, or sneaky identity theft tactics, staying ahead of scammers is now a year-round job for small business owners. The IRS may be the tax authority, but the first line of defense is always you.
