It’s that time of year again: tax time! And that means it’s also high season for identity thieves and scammers. Millions of people are affected by fake tax return filings every year. And while we’re talking about tax return fraud, we should take the opportunity to discuss some other tax and Social Security scams, as well.
Tax Return Fraud
If a bad guy has enough information to convince the IRS that they are you, they can file a tax return on your behalf, usually online. They will of course create a fictitious return that results in a large refund, and have the check sent to them. You won’t know you have a problem until you go to file your taxes and find that it’s already been done.
Unfortunately, for most people, the only way to prevent this from happening is to beat the bad guys to filing your taxes. The Internal Revenue Service (IRS) has a mechanism akin to two-factor authentication called Identity Protection PIN (IP PIN). The IRS provides you with this PIN and you must include it with your tax filing in order to prove that you are who you say you are. Without the proper PIN, the filing will be rejected.
Sadly this service isn’t available to everyone – you have to qualify for it. According to the IRS website, there are three ways to qualify for an IP PIN:
- The IRS sends you a CP01A Notice containing your IP PIN, or
- You filed your federal tax return last year as a resident of Arizona, California, Colorado, Connecticut, Delaware, District of Columbia, Florida, Georgia, Illinois, Maryland, Michigan, Nevada, New Jersey, New Mexico, New York, North Carolina, Pennsylvania, Rhode Island, Texas, Washington, or
- You received an IRS letter inviting you to ‘opt-in’ to get an IP PIN.
If your identity has already been compromised and you can prove it, you can file a Identity Theft Affidavit (Form 14039), which will qualify you for this PIN code. (Given last year’s massive Equifax breach, I think we’ll be seeing a lot of these this year.) But if you can’t get one of these, then your only hope is to beat the fraudsters to the punch. File early!
Phone and Email Scams
This is also the season for tax-related scams. Fake IRS emails and phone callers will say that you’ve done something horribly wrong and owe lots of money. You must immediately send them money or face additional fines, jail time, etc. This is not how the IRS operates! So, if you get such a call, just hang up. If you want to be sure, you can always just call the IRS directly. Furthermore, if you get an email that appears to be an IRS scam, you can forward it to firstname.lastname@example.org. Alerting the IRS will help them to track down these criminals and hopefully prevent them from harassing other people.
Raiding Your Social Security Benefits
And as long as we’re talking identity theft in relation to the IRS, we should talk about the same with the Social Security Administration (SSA). Fortunately, in this case, there is something we can all do to protect ourselves.
Just like with your tax return, criminals can use your identity data to steal your Social Security funds – even if you aren’t yet ready to retire. They create an account in your name and attempt to draw on your retirement or disability funds, or redirect your current checks to a new address. The way to prevent this is to establish your online account yourself and set a strong password. If you haven’t already set up your MySSA account, even if you’re nowhere near retiring, go ahead and do that now. And while you’re at it, go ahead and set up two-factor authentication. (If you find that the bad guys have beat you to it, you should contact the SSA right away.)
Need practical security tips?
Sign up to receive Carey's favorite security tips + the first chapter of his book, Firewalls Don't Stop Dragons.
Don't get caught with your drawbridge down!