Tax Tips, Sept 4, 2024
Tax pros: Know the potential signs of a data breach
The IRS and the Security Summit partners continue to see identity thieves targeting tax professionals in hopes of gaining valuable client tax information.
Tax professionals should contact the IRS immediately when there’s an identity theft issue.
Tax professionals should watch for these red flags when their business experiences these situations:
- Slow or unexpected computer or network responsiveness such as:
- Software is slow or actions take longer to process than usual.
- Computer cursor moves or changes numbers without touching the mouse or keyboard.
- Unexpectedly being locked out of a network or computer.
-
Client tax returns are being rejected because their Social Security number was already used on another return.
-
IRS authentication letters (5071C, 6331C, 4883C, 5747C) are being received even though a tax return hasn’t been filed.
-
Getting more e-file receipt acknowledgements than the tax professional actually filed.
-
The IRS disabled the tax professional’s online account.
-
Transcripts are being delivered to the tax professional’s Secure Object Repository that they did not order.
-
The IRS has notified that the tax professional’s Centralized Authorized File (CAF) number has been compromised. In case of a data breach, proactively safeguard the CAF number and consider requesting a new one for protection.
- Notification from the IRS regarding a client that they do not represent.
Tax pros should report data theft immediately
-
Report the incident to their local IRS stakeholder liaison. Speed is critical. IRS stakeholder liaisons will ensure all the appropriate IRS offices are alerted. If reported quickly, the IRS can take steps to block fraudulent returns in the clients’ names and will assist tax pros through the process.
-
Tax pros should work with cybersecurity experts and insurance companies to determine help them the cause and extent of the loss.
-
Visit the Federation of Tax Administrators to find state contact information. Tax professionals can share information with the appropriate state tax agency by visiting Report a Data Breach.
-
Tax professionals should be proactive with clients who could have been affected and suggest appropriate actions, such as getting an Identity Protection PIN or completing a Form 14039, Identity Theft Affidavit, if applicable.