Tax season is slowly approaching.
Your accountant’s calendar fills up.
Your bookkeeper starts pulling reports.
Conversations turn to W-2s, 1099s, and filing dates.
What rarely gets discussed is this.
The first real tax issue most businesses face is not paperwork. It is fraud.
One scam appears every year before April even shows up. It is simple, convincing, and aimed directly at small businesses. Many companies do not realize it until the damage is done.
The W-2 Request That Isn’t What It Seems
The scam usually begins with a familiar name.
An employee in payroll, HR, or finance receives an email that appears to be from the CEO or a senior leader:
I need all employees’ W-2s for a quick review with the accountant. Can you send them by today?
Nothing about this request feels out of place.
W-2s are being discussed everywhere. Urgency is normal during tax season. The tone matches how leadership actually writes.
So the files are sent.
Only the sender was never the CEO.
It was a criminal using a fake or slightly altered email address that looked legitimate at first glance.
Within minutes, someone outside your business has access to employee data that should never leave your organization.
Why the Impact Is So Severe
A single W-2 contains enough information to cause serious harm. Full names, Social Security numbers, home addresses, and salary details are all there.
That information is often used to file fake tax returns before employees submit their own.
Most businesses discover the problem only after an employee receives a rejection from the IRS, saying a return has already been filed.
At that point, the refund is gone.
What follows are months of cleanup. IRS reports, identity theft protection, credit monitoring, and frustration for employees who did nothing wrong.
For the business, it becomes more than a security issue. It turns into a trust issue. An HR problem. Sometimes even a legal one.
Why This Scam Keeps Working
This attack succeeds because it blends into normal business activity.
- The timing makes sense. February is when W-2s are top of mind.
- The request is realistic. These documents do get shared during tax prep.
- The urgency feels familiar. Everyone is busy and moving fast.
- The sender looks credible. Attackers research names and roles before sending the emails.
- The employee wants to help. Especially when the request appears to come from leadership.
None of this feels suspicious in the moment. That is exactly why it works.
How To Stop It Before It Starts
The encouraging part is that this scam is easy to prevent with a few clear rules.
- Start with a firm policy. W-2s and payroll data should never be sent by email, regardless of who asks.
- Add a simple verification step. Any request involving sensitive employee information should be confirmed through a second channel, such as a phone call or in-person conversation.
- Talk to your team now, not later. A short discussion with payroll and HR about what these emails look like can prevent a major incident.
- Secure access to payroll systems. Multi-factor authentication should be enabled anywhere employee data is stored or accessed.
- Make verification normal. Employees should feel comfortable slowing down and double-checking requests, even when they appear to come from senior management.
These steps take little time but close a very expensive gap.
The W-2 Scam Is Only the Beginning
As tax season progresses, businesses can expect more attempts.
- Fake IRS payment notices.
- Phishing emails posing as tax software updates.
- Messages that appear to come from accountants.
- Invoices designed to look like legitimate tax-related expenses.
Attackers rely on distraction and urgency. Tax season provides both.
Businesses that avoid these problems are not just lucky. They are prepared and intentional about how sensitive requests are handled.
A Quick Check Before Things Get Busy
If your business already has clear policies and your team knows how to spot these scams, you are in a strong position.
If not, this is the right time to fix it.
We offer a short discovery call to review how your business handles payroll access, W-2 requests, email security, and verification practices.
Tax season is demanding enough. Dealing with identity theft should not be part of it.
