Keyboard with Cybersecurity on Enter key

Data Privacy and Security Client Alert - March 2016

Article
Circle Arrow Get the Story

Don't Fall Victim to the W-2 Scam

One of the easiest ways for a criminal to obtain personal data is to have you send it directly to them, and criminals are obtaining thousands of Social Security Numbers from well-meaning employees. They use that information to file fraudulent tax returns. Here's how the scam works

The criminals spoof the email address of a supervisor. At first glance the email address appears to be legitimate, but upon closer look it's actually a Gmail or other account outside of the company. They will then send an email that appears to be from the supervisor to another employee. (And how do they know the names of the supervisors and other human resources personnel? Mostly likely, they found the information on the company's website.) The email will ask the employee to send all of the W-2 statements from last year in a pdf so the supervisor can review them. When the employee replies with all of the requested information, the criminal now has the W-2 statements containing Social Security Numbers, names and addresses for every company employee and some former employees.

Beware of emails that contain language similar to any of the following

  • Kindly send me the individual 2015 W-2 and earnings summary for all W-2 staff for a quick review.
  • Can you send me the updated list of employees with name, date of birth, home address, social security number and salary?
  • I want you to send me the list of W-2 employees wage and tax statements for 2015. I need them in PDF file type, you can send it as an attachment. Kindly prepare the lists and emails them to me asap.

We urge you to educate your employees about this scam.

If you received one of these emails and replied with the information, please contact us as there are steps that you must take to inform your employees and former employees. We can be reached by phone on our hotline at (844) 417.3309 or by email at cyberhotline@kaufcan.com.

Mentioned

The contents of this publication are intended for general information only and should not be construed as legal advice or a legal opinion on specific facts and circumstances. Copyright 2026.

Jump to Page

Kaufman & Canoles, P.C. Cookie Preference Center

Your Privacy

When you visit our website, we use cookies on your browser to collect information. The information collected might relate to you, your preferences, or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. For more information about how we use Cookies, please see our Privacy Policy.

Strictly Necessary Cookies

Always Active

Necessary cookies enable core functionality such as security, network management, and accessibility. These cookies may only be disabled by changing your browser settings, but this may affect how the website functions.

Functional Cookies

Always Active

Some functions of the site require remembering user choices, for example your cookie preference, or keyword search highlighting. These do not store any personal information.

Form Submissions

Always Active

When submitting your data, for example on a contact form or event registration, a cookie might be used to monitor the state of your submission across pages.

Performance Cookies

Performance cookies help us improve our website by collecting and reporting information on its usage. We access and process information from these cookies at an aggregate level.

Powered by Firmseek