Tax Time Guide: Guard personal, financial and tax information year-round

WASHINGTON — The Internal Revenue Service today reminded taxpayers to remain vigilant with their personal information by securing computers and mobile phones. Proper cybersecurity protection and scam recognition can reduce the threat of identity theft inside and outside the tax system.

This news release is part of a series called the Tax Time Guide, a resource to help taxpayers file an accurate tax return. Additional help is available in Publication 17, Your Federal Income Tax.

The IRS doesn’t initiate contact with taxpayers by email, text messages or social media channels to request personal or financial information. People should be alert to scammers posing as the IRS to steal personal information. There are ways to know if it’s really the IRS calling or knocking on someone’s door.

The IRS also works with the Security Summit, a partnership with state tax agencies and the private-sector tax industry, to help protect taxpayer information and defend against identity theft. Taxpayers and tax professionals can take steps to help in this effort.

Below are a few tips to help minimize exposure to fraud and identity theft:

• Protect personal information.  Treat personal information like cash – don’t hand it out to just anyone. Social Security numbers, credit card numbers, bank and even utility account numbers can be used to help steal a person’s money or open new accounts.
• Avoid phishing scams.  The easiest way for criminals to steal sensitive data is simply to ask for it. IRS urges people to learn to recognize phishing emails, calls or texts that pose as familiar organizations such as banks, credit card companies or even the IRS. Keep sensitive data safe and:
  • Be aware that an unsolicited email with a request to download an attachment or click on a URL could appear to come from someone that you know like a friend, work colleague or tax professional if their email has been spoofed or compromised.
  • Don’t assume internet advertisements, pop-up ads or emails are from reputable companies. If an ad or offer looks too good to be true, take a moment to check out the company behind it.
  • Never download “security” software from a pop-up ad. A pervasive ploy is a pop-up ad that indicates it has detected a virus on the computer. Don’t fall for it. The download most likely will install some type of malware. Reputable security software companies do not advertise in this manner.
• Safeguard personal data. Provide a Social Security number, for example, only when necessary. Only offer personal information or conduct financial transactions on sites that have been verified as reputable, encrypted websites.
• Use strong passwords.  The longer the password, the tougher it is to crack. Use at least 10 characters; 12 is ideal for most home users. Mix letters, numbers and special characters. Try to be unpredictable – don’t use names, birthdates or common words. Don’t use the same password for many accounts and avoid sharing them. Keep passwords in a secure place or use password management software.

Set password and encryption protections for wireless networks. If a home or business Wi-Fi is unsecured, it allows any computer within range to access the wireless network and potentially steal information from connected devices. Whenever it is an option for a password-protected account, users also should opt for a multi-factor authentication process.

• Use security software.  An anti-virus program should provide protection from viruses, Trojans, spyware and adware. The IRS urges people, especially tax professionals, to use an anti-virus program and always keep it up to date.

Set security software to update automatically so it can be updated as threats emerge. Educate children and those with less online experience about the threats of opening suspicious web pages, emails or documents.

• Back up files.  No system is completely secure. Copy important files, including federal and state tax returns, onto removable discs or back-up drives and cloud storage. Store discs, drives and any paper copies in secure, locked locations.
• ID Theft Central. New on IRS.gov. Designed to improve online access to information on identity theft. Serves taxpayers, tax professionals and businesses.

Taxpayers can find answers to questions, forms and instructions and easy-to-use tools online at IRS.gov. They can use these resources to get help when it’s needed at home, at work or on the go.