Protecting Your Assets: A Guide to Avoiding Tax Scams and Identity Theft
Tax season is a demanding time for taxpayers and small business owners alike. While you are busy gathering receipts and reconciling your books, criminals are equally active, ramping up sophisticated efforts to trick you into sharing sensitive personal data. These identity thieves use stolen information to file fraudulent tax returns and siphon off refunds, often leaving victims with a complicated mess to clean up. At our Orlando-based CPA firm, we have seen how these scams evolve, and we want to ensure our clients across Florida and the U.S. stay one step ahead of the fraudsters.
It might feel like we discuss identity theft frequently, but that is because the stakes are incredibly high. Having your identity stolen is a financial nightmare that can take years of arduous work to resolve. Today’s scammers are clever, relentless, and constantly innovating. All it takes is a single moment of distraction or one clicked link to compromise your personal information and start a long, stressful recovery process.
Building Your Awareness of Modern Tax Fraud
The most effective tool a scammer has is the appearance of legitimacy. Fraudsters often mimic the IRS name, logo, or official website to convince you that their communication is genuine. They may even use the names of other federal agencies, such as the U.S. Department of the Treasury, to add a layer of perceived authority to their schemes.
In a typical identity theft scam, the fraudster poses as a trusted government official or a representative from a financial institution. Their goal is to trick you into revealing high-value data: credit card numbers, passwords, bank account details, and Social Security numbers. Once they have this information, they can drain bank accounts, run up charges on existing credit lines, or apply for new loans and benefits in your name. Perhaps most frustratingly, they can file a fraudulent tax return early in the season, claiming a refund before you have even had a chance to sit down with your CPA.
These scams are usually initiated through traditional channels like letters and faxes, or modern digital methods like phone calls, text messages, and emails. When scammers use email to lure victims, it is known as “phishing.”
Why Seniors Are Frequent Targets for Scammers
In our practice serving the greater Orlando area, we are particularly concerned about our senior clients. Scammers frequently target individuals over age 65 or those nearing retirement, knowing they may have significant retirement savings. Often, once a senior is successfully tricked into sending money, the scammers will persist and ask for even more.
The financial impact here goes beyond just the initial loss. If a person is scammed out of tax-deferred retirement funds, the IRS may consider those lost funds a taxable distribution. This could trigger ordinary income tax and potential early withdrawal penalties if the account owner is under age 59½. While it is sometimes possible to claim a theft loss deduction, the process is incredibly complex and requires proving the scam was profit-motivated and that recovery is unlikely. We strongly encourage you to talk with your elderly family members about these risks. Urge them to discuss any suspicious messages or “too good to be true” offers with you or a trusted professional before they take any action.
How to Spot a Scam: Red Flags and Warning Signs
Whether it is a phishing email or a “smishing” text message, most scams share common characteristics. They almost always create a sense of artificial urgency. They want to pressure you into acting quickly without thinking—telling you that you are in legal trouble, that you have won an unexpected prize, or that there is a problem with your account that needs immediate attention.
Be extremely wary of any unsolicited communication that asks for payment or personal information. Here are specific signs that an email might be a scam:
- Excessive Information Requests: Be suspicious of emails asking for your name, SSN, bank details, or security questions like your mother’s maiden name.
- The “Bait”: Scammers may offer an unexpected tax refund or ask you to participate in a “paid” IRS survey to get you to engage.
- Threats of Consequences: They may threaten you with additional taxes, legal action, or blocking your access to funds if you do not respond immediately.
- Inaccurate Agency Names: Look closely at the wording; scammers often get the name of the Internal Revenue Service or other agencies slightly wrong.
- Poor Grammar and Phrasing: Many scams originate overseas, leading to odd phrasing or grammatical errors that an official government agency would not make.
- Deceptive Links: Hover your mouse over any link to see the actual URL. If it does not start with the official IRS website address (www.irs.gov) or if it is an unusually long, scrambled address, do not click it.
- Suspicious Sender Addresses: Check the sender’s email carefully. Scammers often use domains that look similar to real companies but have slight misspellings or unusual extensions.
Common Phishing and Smishing Tactics
Criminals use emails to install malware on your computer or direct you to “spoofed” websites that look identical to official portals. Common email themes include phony tax refund notifications, false legal or criminal charges, and notices of “underreported income” that contain malicious attachments. You might also see “Update Your Account” requests that use deceptive links like “IRSgov” (missing the dot before the gov).
Smishing, or SMS phishing, is also on the rise. These text messages often claim your account is on hold or report “unusual activity” to prompt a click. They may also mention unexpected economic impact payments or include callback numbers that lead directly to a scammer’s call center.
Proactive Steps to Protect Yourself
Protection begins with a healthy dose of skepticism. Follow these best practices to keep your data secure:
- Do not click: Never open attachments or links in unsolicited messages claiming to be from the IRS.
- Know IRS protocols: The IRS will never demand immediate payment over the phone, insist on a specific payment method (like wire transfers or gift cards), or threaten you with arrest or deportation.
- Verify through official channels: If you are concerned, call the IRS directly using a number from their official website or log into your secure IRS Online Account.
- Report it: Forward suspicious emails to phishing@irs.gov. For suspicious texts, send the details to the same address with “Text” in the subject line.
- Use an IP PIN: An Identity Protection PIN (IP PIN) is a unique six-digit number assigned by the IRS. It prevents anyone else from filing a tax return using your Social Security number. If a return is filed without the correct PIN, the IRS will automatically reject it.
IP PINs are valid for one calendar year, and a new one is generated annually for your security. If you have previously been a victim of identity theft, you are likely already enrolled. However, any taxpayer who can verify their identity can voluntarily join the program through the official “Get an IP PIN” tool on the IRS website.
The Danger of Social Media “Tax Advice”
Misinformation is rampant on platforms like TikTok and Instagram. Influencers who lack formal tax training often share “hacks” that encourage people to falsify information to maximize refunds. These posts are not only legally dangerous—inviting audits and heavy penalties—but they are also frequently used as gateways for scammers. These bad actors exploit the guise of helpful advice to gain your trust and steal your personal information. When it comes to your taxes, always rely on professional guidance rather than viral videos.
In conclusion, remember that the IRS typically initiates contact through official notices sent via the U.S. Postal Service. They will not reach out through social media, text messages, or email to request your private financial details. With over 38 years of experience, Sandra Stearns CPA is committed to helping our clients in Orlando and beyond navigate these risks safely. If you have concerns about a message you received or want to bolster your tax security, please contact our office today.
Special Considerations for Florida Small Business Owners
In the vibrant business community of Orlando and across Central Florida, entrepreneurs often face unique challenges during tax season that extend beyond traditional phishing. One particularly insidious scam involves fraudulent letters regarding Certificate of Existence or Corporate Minutes requirements. These letters often arrive shortly after a new business is registered with the state. They look remarkably official, featuring seals and citations of state statutes, and they demand a fee to file documents that are either unnecessary or can be filed for a fraction of the cost directly through official state portals. While not a direct IRS scam, this is a form of financial identity theft that targets the same sensitive information used during tax preparation. As a firm with extensive experience in QuickBooks consulting and business support, we encourage our clients to verify any such correspondence with us before sending payment or sensitive data.
The Rise of the Ghost Preparer
Another significant risk during the tax season is the emergence of ghost preparers. By law, anyone who is paid to prepare or assist in preparing federal tax returns must have a valid Preparer Tax Identification Number. Paid preparers must sign the return and include their identification number. A ghost preparer, however, will not sign the return. Instead, they might print the return and tell the taxpayer to sign it and mail it in personally. For e-filed returns, they will prepare the return but refuse to sign as the paid preparer. These individuals often lure clients with promises of inflated refunds based on fabricated deductions or credits. When the IRS inevitably flags the return for an audit, the ghost preparer is nowhere to be found, leaving the taxpayer to deal with the penalties and interest alone. Our firm prides itself on a legacy of ethical, signed, and verified tax preparation that protects our clients from such vulnerabilities.
Taking Action if Your Identity is Compromised
If you discover that a fraudulent return has already been filed in your name, the road to recovery requires immediate and specific steps. First, you should file a report with the local authorities and the Federal Trade Commission. Simultaneously, you must complete the Identity Theft Affidavit, known as Form 14039. This form is the official way to notify the IRS that you are a victim of identity theft and that your account requires specialized monitoring. Once this form is processed, your account will be placed under a protective status, and you will typically be issued the six-digit IP PIN we discussed earlier. This process can delay your actual refund for several months as the IRS works to verify your true identity and remove the fraudulent data from their systems. Managing this process requires patience and meticulous record-keeping, which is where a dedicated accounting partner can provide invaluable support during the restoration of your financial standing.
Want tax & accounting tips and insights?
Sign up for our newsletter.