The Internal Revenue Service issued a warning in late February that a recurring scam this filing season targets tax professionals with a spearphishing email to collect their Electronic Filing Identification Number (EFIN). NCACPA encourages its members to be alert to this scam and protect their client data.
How the scam works
The scammer poses as a tax software provider and emails the tax professional with a request they provide their EFIN information by fax. When the tax professional faxes back their EFIN information, the scammer uses the information to steal client data and file fraudulent tax returns for refunds.
If you receive a EFIN scam email, report it to the IRS
Preparers who receive these IRS impersonation emails should not respond to the email or follow the directions in the email. They should report it immediately to the U.S. Treasury Inspector General for Tax Administration.
You can also:
- Save the email and send it as an attachment to [email protected].
- Report the phishing email to the tax software preparation provider being impersonated.
- Report it to your local IRS Stakeholder Liaison as soon as possible if data theft may have occurred. IRS Stakeholder Liaison staff will let the appropriate IRS offices know to take steps to block fraudulent returns in the clients’ names and assist tax pros through the process.
The correct way to request EFIN information
Requests for EFIN information should be handled through the appropriate tax software preparation provider’s portal after the request has been verified.
Keep client data safe
Tax professionals should watch for phishing scams that seek EFINs, Preparer Tax Identification Numbers, or e-Services usernames and passwords. Find out more about keeping clients’ info safe at the Identity Theft Information for Tax Professionals page of IRS.gov.
If you have questions about this issue or other policy matters, please contact NCACPA Director of Advocacy Robert Broome, CAE.