Small business identity theft is a year-round concern, but with income tax filing season, specific risks are more likely to occur. The IRS reports that there has been an increase in identity thefts. In particular, scammers are increasingly trying to gain access to a company’s W-2 information. The scammers generally go after employees in HR and Payroll, but any staff member or manager may be targeted.
One common method of illegally obtaining a company’s W-2 information involves the scammer sending an email while posing as a company executive, requesting a list of employees and their W-2s from an email address that looks legitimate at a quick glance.
Taxpayers may also receive emails that look like they’re from the IRS but are actually phishing attempts aimed at implanting harmful software into your computer or server. These phishing attempts are also directed at accountants and tax professionals. Always remember that the IRS sends letters by U.S. mail and does not initiate contact with taxpayers by email, text messages or social media.
For information on how to protect yourself, your business, and your clients from identity theft during tax season, the IRS offers up-to-date resources on data theft and scam alerts. The IRS also encourages companies to report the W-2 scam emails by filling out Form W-2/SSN Data Theft: Information for Businesses and Payroll Service Providers.
These are some tips:
Why do these tips matter? As a small business owner, you’re certainly familiar with identity theft, but you may not be familiar with the dark web, an online market where identity theft professionals buy and sell your stolen information.
Places on the internet not identified by traditional search engines are the perfect place for cybercriminals to barter your stolen account information, credentials, documents and other personal information. A synthetic identity, in which both real and fictitious information is merged to create a new identity, may also be found in this marketplace. Some Dark Web businesses even offer customer service functions, including card support and refunds.
While the range of purposes that your private information can be used for is only limited by the criminal imagination, it generally includes obtaining lines of credit, mortgages, loans, and tax refunds.
For example, a stolen user name and password from one credit card can be used to open several accounts, including banking and e-commerce. If you use the same user name and passwords for multiple business services, a cybercriminal will be able to break into several accounts that you hold across various financial and business-related horizons. If this happens, you may have to deal with multiple compromises of both your personal and business-related data and private information.
Although the media focus on data breaches where large companies experience millions of compromised accounts may cause you to assume that your business is too small to attract thieves, small business owners should know that identity thieves target the most vulnerable—not necessarily the biggest—companies. This increased cyber threat means that you need to take strategic steps to reduce the risk for your small business.
Written and maintained by the LegalShield content team, covering legal and identity protection topics for individuals, families, and small businesses.
An indemnity agreement settles the “who is responsible” question ahead of time. One party promises, in writing, to cover certain losses tied to the work, so the other isn't left with the bill. These promises appear in construction contracts, leases, and business sales.
A certificate of good standing is official proof from your state that your business is registered and current on its requirements. Most lenders and agencies want a recent one, so it helps to know how to get it before someone asks.
Whether the goal is selling a company, bringing in a business partner, or passing it to a family member, the LLC ownership transfer often involves reviewing the LLC's operating agreement and the applicable state's rules.
If you want to do business under a name that isn't your own legal name or your LLC's registered name, you need a trade name, also known as a doing business as (DBA) name.
A consulting agreement is a contract between a service provider, such as an independent contractor, and a recipient.
Hold harmless agreements can help reduce a business's liability by having signatories accept a certain amount of risk.
Getting an LLC in New York generally involves choosing a business name, filing Articles of Organization with the New York Department of State, creating a written Operating Agreement, completing New York’s publication requirement, and handling tax and business setup steps, like getting an EIN.
Knowing how to franchise your business takes more than enthusiasm. It takes documented systems, legal preparation, and the right partners.
