Small business identity theft is a year-round concern, but with income tax filing season, specific risks are more likely to occur. The IRS reports that there has been an increase in identity thefts. In particular, scammers are increasingly trying to gain access to a company’s W-2 information. The scammers generally go after employees in HR and Payroll, but any staff member or manager may be targeted.
One common method of illegally obtaining a company’s W-2 information involves the scammer sending an email while posing as a company executive, requesting a list of employees and their W-2s from an email address that looks legitimate at a quick glance.
Taxpayers may also receive emails that look like they’re from the IRS but are actually phishing attempts aimed at implanting harmful software into your computer or server. These phishing attempts are also directed at accountants and tax professionals. Always remember that the IRS sends letters by U.S. mail and does not initiate contact with taxpayers by email, text messages or social media.
For information on how to protect yourself, your business, and your clients from identity theft during tax season, the IRS offers up-to-date resources on data theft and scam alerts. The IRS also encourages companies to report the W-2 scam emails by filling out Form W-2/SSN Data Theft: Information for Businesses and Payroll Service Providers.
These are some tips:
Why do these tips matter? As a small business owner, you’re certainly familiar with identity theft, but you may not be familiar with the dark web, an online market where identity theft professionals buy and sell your stolen information.
Places on the internet not identified by traditional search engines are the perfect place for cybercriminals to barter your stolen account information, credentials, documents and other personal information. A synthetic identity, in which both real and fictitious information is merged to create a new identity, may also be found in this marketplace. Some Dark Web businesses even offer customer service functions, including card support and refunds.
While the range of purposes that your private information can be used for is only limited by the criminal imagination, it generally includes obtaining lines of credit, mortgages, loans, and tax refunds.
For example, a stolen user name and password from one credit card can be used to open several accounts, including banking and e-commerce. If you use the same user name and passwords for multiple business services, a cybercriminal will be able to break into several accounts that you hold across various financial and business-related horizons. If this happens, you may have to deal with multiple compromises of both your personal and business-related data and private information.
Although the media focus on data breaches where large companies experience millions of compromised accounts may cause you to assume that your business is too small to attract thieves, small business owners should know that identity thieves target the most vulnerable—not necessarily the biggest—companies. This increased cyber threat means that you need to take strategic steps to reduce the risk for your small business.
Written and maintained by the LegalShield content team, covering legal and identity protection topics for individuals, families, and small businesses.
Dissolving an LLC can be tricky, and doing it without guidance can lead to unnecessary stress and delays. We’ve put together some helpful information so you can start the LLC dissolution process with more peace of mind.
An employment contract is an important piece of paperwork because it defines the working relationship, your expectations, and conditions. Here are some of the common components included.
Virtual business addresses can be a practical option for those forming an LLC from home, working remotely, or trying to keep their business and personal mail separate.
By the end of this blog, you’ll get a high-level summary of trademarking a name and logo, how logos differ from business names and artwork, and how much it all costs.
A DBA is a name registration that lets you run your business under a name other than your personal legal name or legal business entity. While a DBA offers branding flexibility and market expansion opportunities without creating a new legal structure, it does not provide legal liability protection, tax benefits, or function as a business license.
An indemnity agreement settles the “who is responsible” question ahead of time. One party promises, in writing, to cover certain losses tied to the work, so the other isn't left with the bill. These promises appear in construction contracts, leases, and business sales.
A certificate of good standing is official proof from your state that your business is registered and current on its requirements. Most lenders and agencies want a recent one, so it helps to know how to get it before someone asks.
Whether the goal is selling a company, bringing in a business partner, or passing it to a family member, the LLC ownership transfer often involves reviewing the LLC's operating agreement and the applicable state's rules.
