Boss Phishing for Tax Records

Date: 01/30/2017

Don’t be caught in an identity thief’s net this year. Avoid boss phishing and never share tax or payroll information without verbal confirmation.

Who Is It Targeting

Employees at various businesses

What Is It

A scammer pretends to be someone higher up

What Are They After

This was one of the more popular scams last year, with more than fifty major corporate boss phishing attacks in just the first three months of 2016. The Internal Revenue Service has already issued a warning for this year, informing companies about the dangers of releasing their sensitive records due to an email that appeared to come from someone higher up in the company.

Boss phishing happens when an employee receives an email or text message that appears to come from a manager, supervisor, or even the CEO, asking for things like W2 forms on everyone in the company. Another popular scam is to tell someone to change account numbers, move funds from one company account into this “new” account, or to release the passwords on those accounts.

How Can You Avoid It Boss Phishing

  • Never share information from an emailed request without getting a verbal confirmation.
  • W2 forms, payroll records, company account numbers, and even passwords should never be altered or shared just because someone sent an electronic message.

For full details of this scam check out this article from Los Alamos Daily Post.


If you think you may be a victim of identity theft, contact the Identity Theft Resource Center for toll-free, no-cost assistance at (888) 400-5530.

How much information are you putting out there? It’s probably too much. To help you stop sharing Too Much Information, sign up for the In the Loop.

Get ID Theft News

Stay informed with alerts, newsletters, and notifications from the Identity Theft Resource Center