How to stay cyber secure during tax season

While the federal income tax deadline for filing and payments has been extended automatically this year to July 15, 2020 due to the COVID-19 pandemic, it is still tax season, which means now more than ever, it is essential to protect your personal information, especially as you retrieve and fill out online forms. While identity theft and internet scams can occur at any point, the amount of sensitive information being shared online increases during times like this allowing cybercriminals to access your stuff.

According to the Treasury Inspector General for Tax Administration’s Semiannual Report to Congress, over 2.4 million Americans were victims of scams in 2018, most commonly by phone and email. Although the digital age has made it virtually impossible to avoid the presence of personal information online, there are many ways to protect yourself from cybercrime. Following these tips can help keep your information safe during tax season.

Create unique, strong passwords.
To prevent hackers from accessing your personal accounts, update your password so that it is long, difficult to guess, and includes letters, numbers and symbols, especially for any financial sites such as online banking accounts. It’s important to change your passwords regularly and only use secure methods of storing your passwords.

Enable multi-factor authentication.
Using multi-factor authentication for your personal accounts increases account security. With multi-factor authentication, you’re required to provide another form of identification, such as a passcode provided by email or text, to verify your identity. This is beneficial not only for financial accounts, but for social media, email or any accounts containing personal information. You can start by signing up for two-step login with Duo, a two-factor authentication platform, to protect your Rutgers accounts.

Keep your social security number safe.
Since the IRS uses social security numbers to identify taxpayers, keep your card home in a safe place and never share your number via email or phone.

Be protected with antivirus software.
Using antivirus software blocks hackers from accessing your information. To better protect your devices, check out the antivirus software options offered to Rutgers faculty, staff and students for both university-owned and personal equipment.

Be aware of phishing.
Phishing is the fraudulent practice of attempting to obtain someone’s personal information by appearing as a legitimate source through online communication. Most companies, especially accounting firms, won’t ask you to supply personal or financial information through an unfamiliar form.

How to report tax scams and fraudulent schemes.

IRS: It is important to note that the IRS does not initiate contact with taxpayers via text message, email or social media channels to request financial and/or personal information. To report suspected scams, visit the IRS website to review established reporting protocols. You can also reach out to the Treasury Inspector General for Tax Administration at 800-366-4484.

University: It is important to learn how different departments will interact with you relative to your personal or financial information. For example, you will not be asked to provide your Social Security Number via email to get assistance from Human Resources or Payroll. Also, W2 form requests are managed via the University portal – myRutgers Portal.  When in doubt, verify!

Report suspected scams to abuse@rutgers.edu, as well as to your manager or Dean.

Below is an example of an actual phishing scam received by university staff members in the past.