Khamphani ea W-2 Payroll Phishing Leak kapa Tlokotsi ea Batokilli ba Lekhetho ea CPA: Ho Sireletsa SSN ea Mohiruoa e Mong le e Mong le Puseletso ea Lekhetho.¶

Ho sibolla hore setsebi sa basebetsi kapa setsebi sa meputso se sa tsoa romella lengolo-tsoibila .pdf, .csv, kapa .zip polokelo ea litokomane tsa mohiruoa e mong le e mong oa hajoale le oa mehleng IRS Foromo ea W-2 (Wage and Tax Statement) kapa Foromo ea 1099 (kapa ea Canada T4, UK P60, kapa oa Australia PAYG kakaretso) ho senokoane sa marang-rang se ileng sa senya aterese ea lengolo-tsoibila ea CEO kapa kantle ho CPA - kapa ho ithuta hore sebatli sa k'hamphani ea hau e lokisang lekhetho (Intuit ProSeries, Lacerte, Drake Tax, CCH Axcess, kapa UltraTax CS) e robiloe ka komporo e hole kapa infostealer intrusion - ke **tsietsi ea boitsebahatso ba lialamo tse hlano bakeng sa motho e mong le e mong ea lethathamong leo **. Ho fapana le tlolo ea molao ea karete ea mokitlane ea mabenkele (e rarolloang ka metsotso e 3 ka ho hlakola karete ea polasetiki ea linomoro tse 16), Foromo W-2 kapa Foromo ea 1040 e fang linokoane linotlolo tsa ka ho sa feleng tsa bophelo ba lichelete ba motho: Lebitso le Felletseng la Semolao, Nomoro ea Ts'ireletso ea Sechaba ea 9-DigitSSN), Aterese ea Seterata sa Lehae, Meputso e Khōlō ea Selemo le Selemo (Box 1), Hantle-ntle Lekhetho la Lekeno la Federale le Naha le Hlōletsoeng (Boxes 2 & 17), le Nomoro ea Boitsebiso ea Mohiri ea 9-Digit Federal Employer (EIN). Mekhatlo ea litlokotsebe e etsa chelete ka lihlopha tsa W-2 tse utsoitsoeng **ka mor'a lihora tse seng kae ka mor'a hore li fumane **: li fepa hantle EIN, Box 1 moputso, le Box 2 Ho ts'oara ka kotloloho ho li-bots tsa e-file tse ikemetseng ho fetisa lifilthara tse tsamaellanang le IRS le ho utsoa puseletso ea lekhetho e ngata ea bolotsana pele basebetsi ba 'nete ba kenya lekhetho. Bakeng sa ho hlaphoheloa ha li-imeile tsa khoebo tse pharalletseng, sheba hape corporate Business Email Compromise (BEC) le terata bomenemene hopola; haeba boitsebiso ba motho ka mong kapa SSN ea ngoana e se e ntse e sebelisoa bakeng sa likalimo, bona karabo ea bosholu ba boitsebiso le bosholu ba boitsebahatso ba maiketsetso le mokoloto oa SSN oa bana. Haeba tlōlo ea molao e kenyelletsa tlatlapo ea 'mele kapa ts'ohanyetso ea ts'ireletso ea bophelo hang hang, letsetsa nomoro ea hau ea tšohanyetso ea lehae (911 United States le Canada, 112 ho pholletsa le European Union, 999 United Kingdom) kapa sheba bukana ea rona ea dinomoro tsa tshohanyetso.

Etsa sena hona joale¶

1. HAEBA U MOHIRI, MOLAOLI WA HR, KAPA MOLAOLI WA PAYROLL (Hora 1): Tlaleha tahlehelo ea W-2 / SSN ka kotloloho ho IRS W-2 Data Loss Unit ho dataloss@irs.gov HANG-HANG:
2. Se ho emela matsatsi hore moeletsi oa kantle ho molao a ngole mangolo a tsebiso ea basebetsi pele o tsebisa IRS. Hora e 'ngoe le e' ngoe eo u e letang e lumella linokoane hore li fane ka makholo a liforomo tsa lekhetho tsa Foromo ea 1040 li sebelisa k'hamphani ea hau. EIN mme basebetsi ba hao ba dutse W-2 mabokose.
3. Romela lengolo-tsoibila hona joale ho dataloss@irs.gov ka mola oa sehlooho "W2 Data Loss" e nang le lebitso la k'hamphani ea hau, Nomoro ea Boitsebiso ba Mohiri (EIN), lebitso la mohala/nomoro ea mohala, kakaretso e khuts'oane ea hore na ho lutla ho etsahetse joang, le palo e lekantsoeng ea basebetsi ba amehileng (** LE KA mohla u se ke oa hokela lenane la SSN la mohiruoa lengolo-tsoibila lena la pele** - Bohokahanyi le Bankakarolo ba IRS bo tla ikopanya le uena ka mocha oa phetisetso o patiloeng e le hore IRS e ka tšoaea SSN e 'ngoe le e 'ngoe ea mohiruoa ea amehileng khahlanong le ho faela ka elektronike ka bolotsana).
4. ** HAEBA U CPA, MOTHO E NGOLISITSENG, KAPA MOROKISI WA LEKHETHO (Hora 1): Ikopanye le Bohokahanyi le Bankakarolo ba IRS mme o notlele EFIN / PTIN akhaonteng ya hao ya IRS e-Services hang hang**:
5. Tlas'a ** Phatlalatso ea IRS 4557 (Safeguarding Taxpayer Data)** le FTC Safeguards Rule (16 CFR Part 314), litsebi tsa lekhetho li tlameha ho tlaleha bosholu leha e le bofe bo belaelloang ba data ea bareki kapa faele e sa lumelloeng ea e-mail tlas'a Nomoro ea bona ea Electronic Filing Identification Number (EFIN) ho IRS Stakeholder Liaison ka mor'a lihora tse seng kae e le hore IRS e ka thibela meputso ea bomenemene e fetisoang ho sebelisoa feme ea hau. EFIN le CAF palo.
6. HAEBA U MOSEBETSI EA AMEHANG KAPA MOLEFI (Motsotso oa 1): Eya ho irs.gov/ippin hona joale 'me u fumane PIN ea hau ea IRS e nang le linomoro tse 6 (IP PIN):
7. PIN ** ea Tšireletso ea Boitsebiso ba IRS (IP PIN)** ke khoutu ea lekunutu ea linomoro tse 6 e tsejoang feela ke uena le IRS. Nako eo u ingolisang ho irs.gov/ippin, sistimi ea komporo ea IRS ** e hana ka bo eona tlaleho efe kapa efe ea lekhetho ea elektroniki ea Foromo ea 1040 e kentsoeng tlasa Nomoro ea Ts'ireletso ea Sechaba (SSN) e sa kenyelletseng linomoro tse 6 hantle IP PIN** - leha senokoane se na le W-2 PDF ea hau hantle ka pel'a sona.
8. Haeba setloli sa molao se SE KE UA u otla 'me tlaleho ea hau ea lekhetho e kentsoeng ka e-file e sa tsoa hanoa ka Khoutu ea Phoso ea IRS IND-031-04 kapa R0000-902-01 ("Poelo ka SSN ena e se e kentsoe"):
9. U ke ke ua kenya e-file kgutliso ya bobedi inthaneteng hang ha kgutliso ya motho ya qhekellang e amohetswe. U tlameha ho ** hatisa Foromo ea hau ea 1040 e molaong pampiring **, u kopanye le IRS Foromo ea 14039 e tlatsitsoeng (Identity Theft Affidavit) le kopi ea W-2 ea hau ea 'nete, 'me u romele sephutheloana sa pampiri setsing sa IRS sa naha ea heno (kapa u romelle Foromo 14039 inthaneteng ho irs.gov/dmaf ha u ntse u romella lengolo la hau la ho khutlisa).
10. Emisa Litsi tsa hau tse 3 tsa Mokoloto (Equifax, Experian, TransUnion) Mmoho le Liofisi tse 3 tsa Sekondari (ChexSystems, LexisNexis, le The Work Number):
11. Hobane ho lutla ha W-2 ho pepesa SSN ea hau, moputso o nepahetseng, le mohiri EIN, linokoane li sebelisa data ea W-2 eseng feela bakeng sa bolotsana ba lekhetho, empa hape le ho bula li-account tsa banka (ChexSystems), likalimo tsa likoloi, le likopo tsa fake tsa ho hloka mosebetsi (State Workforce Agency).
12. ** Iketsetse botho ba hau my Social Security akhaonto (ssa.gov/myaccount) le ak'haonte ea hau ea lekhetho la mmuso pele linokoane li li ngolisa ka lebitso la hau **:
13. Masholu a boitsebiso a nang le W-2 ea hau a atisa ho potlakela ho ssa.gov le sebaka sa hau sa mmuso sa Lefapha la Lekeno / Ts'ebetso ea ho hloka mosebetsi ho tseka boemo ba hau ba marang-rang bo sa hlahisoang u sebelisa nalane ea hau ea moputso oa W-2 e le likarabo tsa "netefatso e thehiloeng ho tsebo". Ngolisa liakhaonto tsa hau hang hang hore linokoane li koalloe kantle.

Sefate sa liqeto: Karabelo ea Letsatsi la 1 hang-hang bakeng sa Bahiri / CPAs vs. Basebeletsi ba Amehileng¶

Latela lekala le bapisang karolo ea hau (Mokhatlo/HR/CPA khahlano le Mosebeletsi ka Mong/Moreki) ho phethahatsa mohato o mong le o mong o tlamang oa ho thibela lihoreng tse 24 tsa pele:

flowchart TD
    Start["W-2 Payroll Phishing Leak kapa CPA Tax Server Seva e Fumanehile"] --> RoleCheck{"Na u Mohiri / CPA Feme, kapa na u Mohiruoa / Molefi ea Amehileng?"}

    RoleCheck -->|"Mohiri, Motsamaisi oa HR, Mofani oa Meputso, kapa Feme ea CPA"| OrgBranch["KGATO YA 1A: E Tlamang Mokgatlo & Ditaba tsa IRS (Dihora tse 1 ho isa ho tse 24)"]
    RoleCheck -->|"Mosebeletsi ea Amehileng, Mokonteraka (1099), kapa CPA Client"| EmpBranch["MOHATO 1B: Motho ka Mong oa SSN & Lockdown ea Lekhetho (Metsotso 1 ho isa ho 60)"]

    OrgBranch --> IRSNotify["1. Imeile dataloss@irs.gov (Sehlooho: 'W2 Data Loss') & Tsebisa Federation of Tax Administrators (StateAgencies@taxadmin.org)"]
    IRSNotify --> CPACheck{"Na CPA Tax Software Server (Drake / Lacerte / ProSeries / CCH) e robehile?"}
    CPACheck -->|"E: Feme ea CPA"| CPASteps["2. Letsetsa IRS Stakeholder Liaison -> Audit EFIN Transmission Counts in e-Services -> Report to FTC (Safeguards Rule) haeba >= 500 Clients"]
    CPACheck -->|"No: Corporate W-2 BEC Phish"| BECSteps["2. Sheba hore na Phisher o bile le phihlello ea 'nete ea lebokose la poso (M365/Google Audit Logs) vs External Display-Name Spoof -> File FBI IC3 Report"]

    CPASteps --> NotifyStaff["3. Tsebisa Basebetsi/Bareki Bohle ba Amehileng Nakong ea Lihora tse 24-72 hore ba tsebe ho notlela li-PIN tsa IRS IP Pele ho E-File ea Scammers."]
    BECSteps --> NotifyStaff

    EmpBranch --> LockIPPIN["1. Ingolise ho IRS Identity Protection PIN Hang-hang ho irs.gov/ippin (E thibela E-Filing ea Boqhekanyetsi ea 1040)"]
    LockIPPIN --> AlreadyFiled{"Na Scammer e se e E-File Tlas'a SSN ea Hau (Hana Khoutu IND-031-04 / R0000-902-01)?"}

    AlreadyFiled -->|"E: Khutlisa e Hanohile Joalo ka Phetolelo"| File14039["2A. Kenya Foromo ea IRS 14039 Online (irs.gov/dmaf) LE Foromo ea Pampiri e Saennoeng ka Lengolo 1040 + W-2 + Foromo ea 14039"]
    AlreadyFiled -->|"Che: Ha e e-so Fanoe"| ClaimPortals["2B. Kopa Ak'haonte ea Hau ho ssa.gov/myaccount, irs.gov, le Lekhetho la Naha / Lefu la Mosebetsi"]

    File14039 --> FreezeAll["3. Freeze Equifax, Experian, TransUnion, ChexSystems, LexisNexis, le Equifax 'The Work Number'"]
    ClaimPortals --> FreezeAll

Mohato oa 1: Emergency Playbook for Employers, HR Directors, le CPA Femes (Lihora 1 ho isa ho 24)¶

Ha lefapha la meputso le oela bakeng sa lengolo-tsoibila la khale la CEO W-2 spear-phishing ("Lumela [Lebitso], ke kopanong ea boto/ea liphuputso 'me ke hloka likopi tsa PDF tsa basebetsi bohle ba W-2 bakeng sa 2025 hang-hang, ka kopo romella e le sephutheloana"), kapa ha feme ea CPA e fumana sesebelisoa se sa lumelloang sa ho kena hole (ScreenConnect, AnyDesk, Splashtop) moreki ea romelloang kantle ho naha .tax lifaele, **lebelo le lekanyetsa hore na ke basebetsi ba bakae ba utsoang lekhetho la sebele **.

Mohato oa 1: Tsebisa Yuniti ea Tahlehelo ea data ea IRS W-2 (dataloss@irs.gov) ka Hora ea 1¶

The Internal Revenue Service e boloka phaephe e ikemetseng e arabelang ka potlako le Seboka sa Tšireletso (IRS, mafapha a lekeno la naha, le bafani ba software ea lekhetho) ka ho khetheha ho beha li-filters tse ngata tsa bomenemene ho SSN e 'ngoe le e 'ngoe e amanang le mohiri ea tlōtseng molao. EIN. 1. Romela hanghang lengolo-tsoibila le sa ngolisoang ka mokhoa o hlakileng ho dataloss@irs.gov: - Mola oa Sehlooho: W2 Data Loss - Mongolo o tlameha ho kenyelletsa: - Khoebo / Mokhatlo Lebitso la Molao - Nomoro ea Boitsebiso ba Mohiri oa Khoebo (EIN) (tsohle tse amehang EINs haeba lithuso tse ngata li ne li kenyelelitsoe) - Lebitso la Motho, Sehlooho, Nomoro e Otlolohileng ea Mohala, le Aterese ea Imeile - Letsatsi leo ho dutlang ha W-2 ho etsahetseng ka lona le Letsatsi la ho sibolla - Ho dutla ho etsahetse jwang (mohlala, "CEO email spoofing to payroll manager" kapa "Ho fihlella ntle ho tumello ho portal ya payroll") - Kakaretso ea palo ea basebetsi / liforomo tse amehang (W-2, 1099-NEC, joalo-joalo) - BOHLOKOA: O SE KE oa hokela spreadsheet kapa PDF ea li-SSN tsa basebetsi ho lengolo-tsoibila lena la pele. Ka mor'a lihora tse seng kae, mofuputsi oa IRS o tla araba ka litaelo tse sireletsehileng ho kenya lenane le patiloeng/le patiloeng la li-SSN tse amehileng hore IRS Return Integrity and Compliance Services (RICS) enjene e ka beha letšoao la bomenemene hanghang akhaonteng ea lekhetho ea mohiruoa e mong le e mong.

Mohato oa 2: Tsebisa Mekhatlo TSOHLE ea Lekhetho la Naha ka lengolo-tsoibila le le leng ka Federation of Tax Administrators (FTA)¶

Basebeletsi ba boetse ba utsuoa Puseletso ea Lekhetho la Lekeno la Naha ho sebelisoa Lebokose la 15/16/17 la W-2 e lutlileng. Sebakeng sa ho batla linomoro tsa mehala tse 50 tse arohaneng tsa Lefapha la Lekeno: - Email StateAgencies@taxadmin.org (e hlokometsoeng ke Mokhatlo oa Batsamaisi ba Lekhetho FTA ka kopanelo le IRS Security Summit). - Fana ka lebitso la k'hamphani ea hau, lintlha tsa ho ikopanya le uena, E reng u na le basebetsi ho (U se ke ua** kenyelletsa li-SSN ho lengolo-tsoibila), 'me FTA e tla hokahanya hang-hang sebaka sa W-2 sa boemo ba mmuso le Lefapha le leng le le leng la Lekhetho la Naha le amehang.

Mohato oa 3: Liketso tse Eketsehileng tse Tlamang Haeba U Feme ea CPA kapa Mohlophisi oa Lekhetho¶

Haeba feme ea ho lokisa lekhetho (CPA, EA, Tax Attorney, kapa tšebeletso ea ho boloka libuka) e na le tlōlo ea molao ea lifaele tsa lekhetho la bareki (Drake, Lacerte, ProSeries, UltraTax, CCH, TaxSlayer Pro, ATX): 1. ** Kena ho IRS e-Services (irs.gov/e-services) hang-hang 'me u hlahlobe ea hau EFIN boemo**: Lekola palo ea lipeeletso tse fetisoang tlasa feme ea hau ** Nomoro ea Boitsebiso ba Filing ea Elektroniki (EFIN)**. Bahlaseli ba tlōlang lits'ebetso tsa CPA ba fetisetsa ka khutso makholo a bareki ba fetotsoeng Foromo ea 1040 e khutla ka bosiu bo le bong (ho fetola feela mokhoa o tobileng oa depositi le linomoro tsa akhaonto ho Foromo ea 1040 / Foromo ea 8888 ho ea ho li-akhaonto tsa Green Dot / Chime / prepaid mule). 2. Ikopanye le Bohokahanyi ba Stakeholder ba sebakeng sa heno ba IRS hang-hang: Fumana Bohokahanyi ba Stakeholder Liaison ho irs.gov/businesses/small-businesses-self-employed/stakeholder-liaison-local-contacts. Khokahano ea Stakeholder e tla hokahanya le IRS Criminal Investigation (IRS-CI) ebe o fana ka e 'ngoe EFIN haeba ea hau e ne e sekiselitsoe. 3. Latela Molao oa Tšireletso ea FTC (16 CFR Part 314) Taelo ea Tsebiso ea Tlolo ea Molao ea Matsatsi a 30: Litsebi tsohle tse lokisetsang lekhetho United States li khetholloa ka molao e le "litsi tsa lichelete tseo e seng tsa libanka" tlas'a Gramm-Leach-Bliley Act (GLBA) le FTC Safeguards Rule. Tlas'a Molao o fetotsoeng oa FTC Safeguards (o qalileng ka Mots'eanong 2024), tlolo efe kapa efe e amanang le tlhaiso-leseling e sa ngolisoang eo e seng ea sechaba ea 500 bareki kapa ho feta e tlameha ho tlaleheloa ka mokhoa oa elektroniki ho Federal Trade Commission (FTC) nakong ea matsatsi a 30 ka mor'a ho sibolloa.

Mohato oa 4: Fana ka Tlaleho ea FBI IC3 le Litsebiso tsa Tlokotsi ea Attorney General ea Naha¶

1. Faela tlaleho ea W-2 Business Email Compromise ho ic3.gov (FBI Internet Crime Complaint Center): Kenyelletsa tse felletseng RFC 5322 lihlooho tsa lengolo-tsoibila (Authentication-Results, Received: from Liaterese tsa IP, Reply-To: domain) ea lengolo-tsoibila la phishing le qhekellang mosebeletsi oa moputso oa hau.
2. ** Netefatsa hore na ak'haonte ea lengolo-tsoibila ea mohiruoa oa hau e hlile e utsuoe khahlano le.
3. Hlahloba boitsebiso ba Microsoft Entra ID / Google Workspace audit logs: o entse domain e ka ntle (ceo-companyname.com kapa a gmail.com karabo-ho aterese) e mpa e senya Lebitso la Pontšo ea CEO, kapa na mohlaseli o hlile a kena ka lebokoseng la poso la 'nete la CEO kapa la mohiruoa oa HR? Haeba mohlaseli a kene ka lebokoseng la mangolo la HR/Payroll ka kotloloho, W-2 e 'ngoe le e 'ngoe ea nalane, cheke e sa sebetseng ea depositi e tobileng, le tlhahlobo ea phasepoto ea I-9 Sent Items le Inbox e boetse e sekiselitsoe. Latela akhaonto ea imeile e hacked, melao ea ho fetisa, le ho hlaphoheloa.
4. Romela tlhokomeliso e potlakileng ea "Day-1 Heads-Up" ho basebetsi bohle ba amehileng hang hang: Le haeba lengolo la hau la molao la molao la mmuso (ho kenyeletsoa likhoeli tse 12 ho isa ho tse 24 tsa tlhahlobo ea boitsebiso e lefelloang joalo ka IDX, Experian IdentityWorks, Norton LifeLock, kapa Kroll) ho nka matsatsi a 3 ho isa ho a 5 ho fana, ** romela temoso ea ka hare ho basebetsi ba hau ka Letsatsi la 1 ** ho ba laela ho fumana IRS Identity Protection PIN (irs.gov/ippin) le ho emisa litsi tsa bona tsa mekitlane kajeno pele litlokotsebe li kenya lifaele ka mabitso a tsona.

Mokhahlelo oa 2: Tlatsa Buka ea Lipapali ea Tšireletso bakeng sa Basebetsi ba Amehileng le Balefalekhetho¶

Haeba u sa tsoa fumana lengolo-tsoibila kapa lengolo le bolelang hore lifaele tsa W-2 tsa mohiri oa hau kapa seva ea lekhetho ea CPA e robiloe, u se ke ua ingolisa feela bakeng sa khoutu ea mahala ea selemo se le seng ea ho hlahloba mokitlane ebe u phomola. Tlhokomelo ea mokoloto e u romella feela tlhokomeliso * kamora hore* kalimo e buloe, mme ** tlhahlobo ea mekitlane ha e bonahale e le lipampiri tsa lekhetho tsa IRS, likopo tsa ho hloka mosebetsi, kapa liphetoho tsa depositi ka kotloloho **.

Bapisa seo ho lutla ha W-2 ho se pepesang le senotlolo se hlokahalang ho koala tlokotsi e 'ngoe le e 'ngoe:

Tatellano ea ho Lockdown ea Basebetsi ka Mohato ka Mohato (E nka Kakaretso ea Metsotso e 35)¶

Mohato oa 1: Notlela Ak'haonte ea hau ea Lekhetho ea IRS ka PIN ea Tšireletso ea Boitsebiso (IP PIN)¶

1. E-ea ka kotloloho ho portal ea semmuso ea IRS: https://www.irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin(irs.gov/ippin).
2. Tobetsa "Fumana PIN ea IP" 'me u kene ka eona ID.me / Ak'haonte ea IRS (kapa netefatsa boitsebiso ba hau ho bopa).
3. Keletso: Ka ho theha ea hau IRS.gov / ID.me akhaonto hona joale, o boetse o thibela linokoane ho theha fake ID.me ak'haonte tlasa SSN ea hau ho khoasolla lingoliloeng tsa hau tsa khale tsa lekhetho.
4. Ha e se e netefalitsoe, skrineng se tla bonts'a hang-hang 6-digit ea hau IP PIN. Boloka nomoro ena ho molaoli oa phasewete ea hau.
5. ** Joang IP PIN e sebetsa**: Ha u (kapa CPA ea hau) u kenya tlaleho ea hau ea 'nete ea lekhetho selemong sena, u kenya nomoro ena ea linomoro tse 6 ho Identity Protection PIN Lebokose le haufi le mosaeno oa hau ho Foromo ea 1040. Haeba senokoane leha e le sefe se leka ho kenya tlaleho ea lekhetho ka elektronike se sebelisa SSN ea hau ntle le khoutu eo ea linomoro tse 6, seva sa IRS e-file se hana tlhahiso ea sona ka 1 millisecond. (Tlhokomeliso: Pherekhong e ngoe le e ngoe, IRS e hlahisa linomoro tse 6 tse ncha IP PIN ka har'a ak'haonte ea hau ea inthanete bakeng sa sehla se secha sa ho kenya.)
6. Haeba u nyetse 'me u file Married Filing Jointly: Etsa hore molekane oa hau le eena a fumane lengolo la IP PIN bakeng sa SSN ea bona, le haeba mohiri oa hau a ne a tlotsoe, hobane tlaleho e kopaneng ea lekhetho e thathamisa li-SSN ka bobeli.

Mohato oa 2: Faela IRS Foromo 14039 (Identity Theft Affidavit) FEELA Haeba ho Hlokahala¶

U se ke ua** romella pampiri Foromo ea 14039 haeba u atlehile ho fumana lengolo la IP PIN Marang-rang, 'me ha ho tlaleho ea lekhetho e entsoeng ka bolotsana - IRS e eletsa ka ho hlaka hore ho fumana chelete. IP PIN inthaneteng e potlakile mme e qoba tieho ea ho lokisa pampiri. **Leha ho le joalo, O TLAMEHA ho kenya IRS Foromo ea 14039 (Identity Theft Affidavit) hang ha : - Tlaleho ea hau ea lekhetho e kentsoeng ka e-file ** e ile ea hanoa hobane motho e mong o se a ntse a file tlaleho a sebelisa SSN ea hau (IND-031-04 / R0000-902-01), KAPA - U ke ke ua netefatsa boitsebiso ba hau inthaneteng ho irs.gov/ippin, KAPA - U fumane tsebiso ea IRS (CP01E, 5071C, 4883C, 5747C, kapa CP2000) ho bua ka tlaleho ea lekhetho eo u sa kang ua e faela kapa moputso ho tsoa ho mohiri eo u sa kang ua mo sebeletsa. - Mokhoa oa ho fana ka Foromo ea 14039: U ka e fana ka inthaneteng ka Sesebelisoa sa Maiketsetso sa Tokomane sa IRS ho irs.gov/dmaf (haeba o kenya kopo pele o hanoloa) kapa u kopanye pampiri e saennoeng Foromo 14039 ka ho toba ka mor'a pampiri ea hau e saenneng Foromo ea 1040 ebe u e romela setsing sa IRS bakeng sa naha ea heno.

Bohato ba 3: Beha Litšireletseho tsa Kakaretso tsa Mahala ho Liofisi Tsohle tse 7 ( tsa mantlha + tsa bobeli)¶

Tlas'a molao oa federal (Economic Growth, Regulatory Relief, and Consumer Protection Act), ho hatsetsa le ho lokolla mokoloto oa hau ke 100% mahala setsing se seng le se seng. U se ke ua** ho lumella liofisi hore li u rekisetse sehlahisoa sa "Credit Lock" se lefuoang ka $ 19.99 / khoeli; kamehla khetha molao "Security Freeze":

1. Equifax: equifax.com/personal/credit-report-services/credit-freeze/ kapa letsetsa 1-888-298-0045.
2. Moitsebi: experian.com/freeze/center.html kapa letsetsa 1-888-397-3742.
3. TransUnion: transunion.com/credit-freeze kapa letsetsa 1-800-916-8800.
4. Innovis (The 4^th Consumer Credit Bureau): innovis.com/personal/securityFreeze kapa letsetsa 1-866-712-4546.
5. ChexSystems (E thibela scammers ho bula liakhaonto tsa bomenemene tsa ho hlahloba/ho boloka ka lebitso la hau): chexsystems.com/security-freeze/place-freeze kapa letsetsa 1-800-428-9623.
6. LexisNexis Risk Solutions (E sebelisoa ke liinshorense tsa likoloi, ba alimang ntlo le li-portal tsa mmuso): consumer.risk.lexisnexis.com/freeze kapa letsetsa 1-800-456-1244.
7. Equifax The Work Number (E sebelisoa bakeng sa netefatso ea mosebetsi / moputso le likalimo tsa letsatsi la moputso): Letsetsa 1-800-367-2884 kapa etela employees.theworknumber.com mme o kopa Employee Data Freeze ho SSN ea hau.

Mohato oa 4: Etsa kopo ea hau my Social Security (ssa.gov) le Portal Payroll ya Basebetsi (ADP / Workday / Gusto)¶

1. Etela https://www.ssa.gov/myaccount/ 'me u netefatse hore ak'haonte ea hau ea Ts'ireletso ea Sechaba e ngolisitsoe ho lengolo-tsoibila la hau le Authenticator/Login.gov 2FA. Hang ha hao ssa.gov ak'haonte e tsekoa ke uena, ha ho senokoane se ka ngolisang akhaonto ea Ts'ireletso ea Sechaba ea Inthaneteng tlas'a SSN ea hau kapa ho khelosa melemo ea nakong e tlang.
2. Kena ho portal ea mohiri oa hau ea ho iphelisa (ADP, Workday, Paychex, Gusto, Rippling, Paylocity, UKG). Hobane W-2 e na le lipalo tse nepahetseng tsa lidolara tseo li-desks tse ling tsa litefo tsa lefa li li botsang ha u etsa phasewete ("Box 1 YTD gross pay on your 2025 W-2?"), lumella Authenticator App or Passkey 2FA ho kena ha hao ho payroll hang-hang 'me u netefatse hore banka ea hau ha e so hlakisetse nomoro ea akhaonto.

Mokhahlelo oa 3: Seo U Lokelang ho se Etsa Haeba U Fumana Boemo ba ho Hloka Mosebetsi (Fake State State)1099-G) kapa Tsebiso ea Balance-Due ea IRS Likhoeli Hamorao¶

Hobane li-database tsa W-2 li rekisoa hape 'marakeng oa marang-rang a lefifi ka lilemo tse ngata kamora ho lutla ha phishing ea pele, shebella litlhaselo tsena tse peli tse liehileng:

1. Klemo ya Naha ya ho Hloka Mosebetsi (O fumana karete ya banka, pososelo ya PIN, kapa Foromo 1099-G ka poso, kapa lefapha la hau la HR le fumana "Kopo ea Boitsebiso ba Karohano" ha u ntse u sebetsa moo)¶

• Mohato oa 1: Hang-hang tsebisa lefapha la HR le State Workforce Agency ea hau (SWA) Mohala oa Bomenemene (dol.gov/general/topic/unemployment-insurance e thathamisa sebaka se seng le se seng sa bomenemene ba mmuso).
• Mohato oa 2: U SE KE UA tlaleha bomenemene 1099-G chelete ea ho hloka mosebetsi tlalehong ea hau ea lekhetho ea federal. Tlas'a tataiso ea IRS (IR-2021-24), leha setsi sa hau sa mmuso ha se so u romelle tokiso $0 Sebopeho 1099-G ka la 15 Mmesa, tlaleha feela chelete ea 'nete eo u e fumaneng foromong ea hau ea 1040; ho tlaleha tefo ea bosholu ea scammer ea fake ha u khutla ho tla u lefisa ka phoso chelete eo u sa kang ua e ama.

2. Employment-Related Identity Theft (Motho e mong o sebelisa SSN ea hau e utsoitsoeng ho I-9 / W-4 ho sebetsa mosebetsing o mong, mme IRS e o romella a CP2000 tsebiso e reng ha u tlalehe meputso e fokolang ho tsoa k'hamphaning e sa tsejoeng)¶

• Arabela ho CP2000 tsebiso ka ho tšoaea lebokose le bontšang hore ha u e-s'o sebeletse mohiri eo, hokela IRS Form 14039 (hlahloba Lebokose la 2: "Ho na le motho ea sebelisitseng boitsebiso ba ka ho fumana chelete"), 'me u hlahlobe histori ea hau ea selemo le selemo ka hare ssa.gov/myaccount selemo se seng le se seng ho etsa bonnete ba hore ha ho na meputso ea motho eo u sa mo tsebeng e romelloang rekotong ea hau ea Ts'ireletso ea Sechaba.

Mokhahlelo oa 4: Lethathamo la Thibelo ea Mekhatlo - Ho Emisa Litlōlo Tsa Bolotsana tsa W-2 le CPA¶

• Theha Molao oa K'hamphani oa Ironclad "Zero Email W-2": E etse hore e ngoloe leano la khoebo - le saennoeng ke CEO, CFO, le mosebeletsi e mong le e mong oa HR/Payroll - hore **ha ho na faele ea sechaba ea basebetsi W-2, 1099, kapa faele ea sechaba e ka romelloang ka lengolo-tsoibila ho mang kapa mang, ho kenyeletsoa CEO kapa Boto ea Batsamaisi **, ntle le netefatso ea batho ba bangata kapa e phele ka video le phetiso e patiloeng.
• Beakanya Thibelo ya Tahlehelo ya Ditaba tse tswang kantle (DLP) Melao ho Microsoft Purview (M365) kapa Google Workspace: Theha molao oa sepalangoang oa DLP o itlamelang o **thibelang lengolo-tsoibila lefe kapa lefe le tsoang kantle le nang le Nomoro ea Tšireletso ea Sechaba ea U.S.SSN) mekhoa ea regex (\b\d{3}-\d{2}-\d{4}\b) kapa Form W-2 litempele **. Ha mosebeletsi oa HR a leka ho hokela leqephe la 50 la W-2 PDF atereseng ea lengolo-tsoibila le kantle, seva ea poso e thibela phetiso ka bo eona pele byte e le 'ngoe e tloha mohahong.
• Eketsa Banner ea Tlhokomeliso ea Motho ea Romellang Kantle ([EXTERNAL EMAIL - SPOOF WARNING]) Ho Hlakola Mabitso a Pontšo ea Tsamaiso ka ho Khethehileng: Hlophisa molao o thibelang ho iketsa eka ke oa Exchange Online / Google Workspace (VIP / Executive Spoof Protection) e behelang batho ka thoko kapa e otlang banner ea temoso e khubelu ho lengolo-tsoibila lefe kapa lefe le kenang le tsoang kantle ho mokhatlo oo From: Lebitso la Pontšo le lumellana hantle le Lebitso la Pele le la ho Qetela la CEO oa hau, CFO, kapa Moeletsi oa Kakaretso.
• Bakeng sa Lifeme tsa CPA: Isolate Tax Software Servers (Drake, Lacerte, ProSeries) Ka morao ho Phishing-Resistant FIDO2 MFA mme E Ngotswe WISP Litaolo: Mokhoa o mong le o mong oa lekhetho oa US o hlokoa ke IRS Publication 4557 (le ea selemo le selemo PTIN lebokoso la ho nchafatsa) ho boloka ho ngotsoe Leano le Ngotsoeng la Tšireletso ea Tlhahisoleseding (WISP), qobella Multi-Factor Authentication (MFA) lits'ebetsong tsohle tsa lehae le tsa cloud tax software, le ho thibela Remote Desktop Protocol e sa netefatsoang (RDP boemakepe 3389) pepeso.

Linomoro tsa libaka tsa tšohanyetso le liprothokholo tsa mekhatlo¶

Haeba mokhatlo oa hau kapa boitsebiso ba hau ba lekhetho bo senyehile ka lebaka la ho lefa kapa ho tlola molao oa ba lokiselitseng lekhetho, tlaleha ho balaoli ba molao ba lekhetho le ts'ireletso ea data sebakeng sa hau:

• United States: Imeile ea bahiri dataloss@irs.gov (Sehlooho: W2 Data Loss) le StateAgencies@taxadmin.org. Balekhetho ba letsetsa 1-800-908-4490(IP PIN: irs.gov/ippin; Foromo ea Marang-rang 14039: irs.gov/dmaf). Tlaleha W-2 phishing ho FBI IC3 (ic3.gov) le IdentityTheft.gov(1-877-438-4338).
• Canada (T4 / SIN Litlōlo): Letsetsa CRA Litšebeletso tsa Tšireletso ea Boitsebiso (1-800-959-8281) ho beha PIN ya Tshireletso ho hao SIN, le ho tlaleha litlolo tsa molao tlas'a PIPEDA ho OPC (priv.gc.ca / 1-800-282-1376).
• United Kingdom (P60 / NINo Litlolo): Tlaleha ho HMRC (0300 200 3300 / phishing@hmrc.gov.uk), tsebisa ICO (0303 123 1113) nakong ea lihora tse 72 tlasa UK GDPR, tlaleha ho ** Bosholu ba Ketso (0300 123 2040)**, 'me u ingolise ho Cifas Protective Registration (cifas.org.uk).
• European Union: Tsebisa naha ea heno Bolaoli ba Tšireletso ea Lintlha (DPA) nakong ea lihora tse 72 tlas'a Athikele ea 33 ea GDPR 'me u tsebise basebetsi ba amehileng tlas'a Molao oa 34.
• Australia le New Zealand (TFN / IRD Litlolo): Australia, letsetsa ATO Client Identity Support Center (1800 467 033) ho notlela hao TFN, tlaleha tlasa Sekema sa OAIC NDB (oaic.gov.au), ebe o letsetsa IDCARE (1800 595 160). New Zealand, letsetsa Inland Revenue (0800 227 774).
• India le Asia-Pacific (Form 16 / PAN Litlolo tsa molao): Tlaleha ho CERT-In (incident@cert-in.org.in) nakong ea lihora tse 6, letsetsa 1930(cybercrime.gov.in), 'me u nolofalletse Aadhaar Biometric Lock (myaadhaar.uidai.gov.in).

Lipotso tse botsoang khafetsa¶

Na ho emisa mokoloto oaka ho Equifax, Experian, le TransUnion ho thibela senokoane ho kenya tlaleho ea fake ea lekhetho ea IRS ka W-2 ea ka e lutletseng?¶

Che, ho hang. Ho emisoa ha mekitlane ho Equifax, Experian, le TransUnion ho thibela feela libanka le ba alimang ho hula tlaleho ea hau ea mokoloto ea bareki ho bula likarete tse ncha tsa mokoloto, likalimo tsa koloi kapa mekoloto ea ntlo. The Internal Revenue Service (IRS) le Mafapha a Naha a Lekeno le ka mohla u se ke ua hula tlaleho ea mokitlane oa bareki ha o kenya tlaleho ea lekhetho. The feela senotlolo se thibelang senokoane ho kenya tlaleho ea bomenemene ea lekhetho la Foromo ea 1040 le W-2 ea hau e lutlileng ke IRS Identity Protection PIN (IP PIN) fumanoa ka kotloloho ho irs.gov/ippin.

Puseletso ea ka ea lekhetho e tla lieha halelele hakae haeba motho ea qhekellang a se a kentse tlaleho ea bohata tlas'a SSN ea ka pele ke fumana IP PIN?¶

Haeba tlaleho ea hau ea lekhetho ea elektroniki e ile ea hanoa e le kopi (`IND-031-04`) mme o ne o tlameha ho romella pampiri Foromo ea 1040 le Foromo ea 14039 (`Identity Theft Affidavit`), IRS Identity Theft Victim Assistance (`IDTVA`) yuniti e tlameha ho batlisisa ka letsoho litlaleho tse peli tse qothisanang lehlokoa, e tlose tlaleho ea bolotsana ea senokoane ho sengoloa sa hau sa lekhetho, ebe e sebetsa tlaleho ea pampiri ea hau. Ho ipapisitsoe le morao tjena IRS IDTVA inventory backlogs, ho rarolla phetiso ea boitsebahatso ea bosholu ba bosholu hangata ho nka lipakeng. Matsatsi a 120 le matsatsi a 360+ (leha IRS e lefa tsoala ea molao mabapi le puseletso e molaong e liehileng matsatsing a 45 a fetileng kamora la 15 Mmesa, mme hang ha e rarollotsoe, IRS e u romella lengolo-tsoibila le lecha la linomoro tse 6. IP PIN Pherekhong e ngoe le e ngoe bophelo bohle).

Mohiri oa ka o fane ka likhoeli tse 12 kapa tse 24 tsa tlhahlobo ea mahala ea Experian IdentityWorks / LifeLock / IDX kamora ho lutla ha W-2. Haeba ke e amohela, na ke tlohela tokelo ea ka ea ho kena nyeoeng?¶

Hoo e ka bang mangolong ohle a tloaelehileng a melao ea molao mabapi le tlōlo ea molao United States, a ingolisa ho khoutu ea boitsebiso ea likhoeli tse 12 ho isa ho tse 24 e fanoeng ke mohiri oa hau kapa feme ea CPA. ha e fane ka litokelo tsa hau tsa molao khahlano le k'hamphani e robehileng - liakhente tsa mmuso ka kakaretso li nyahamisa kapa li thibela ka matla ho tlamahanya tokiso e tlamang ea tlolo ea molao le tokollo ea melato. Leha ho le joalo, bala mongolo o motle leqepheng la ngoliso ka hloko: ka linako tse ling, morekisi oa motho oa boraro o beha leihlo. mong Terms of Service e kenyeletsa arbitration clause e laolang likhohlano le ho beha leihlo morekisi ka boeena, e arohaneng le mohiri oa hau.

Ho thoe'ng haeba ke sa khone ho feta inthaneteng ID.me netefatso ho irs.gov/ippin ho fumana PIN ea ka ea Tšireletso ea Boitsebiso ba IRS?¶

Haeba sesebelisoa sa inthaneteng se irs.gov/ippin ha e khone ho netefatsa boitsebahatso ba hau (kapa haeba u sa rate ho sebelisa tekano ea sefahleho ID.me, moo o ka kopang morekisi oa moqoqo oa video ho e-na le ho tsamaisana le selfie), o na le mekhoa e 'meli ea semmuso: (1) Haeba moputso o felletseng o fetotsoe (`AGI`) e ka tlase ho moeli ($84,000 bakeng sa batho ka bomong kapa $168,000 bakeng sa ho tlatsa lenyalo ka kopanelo), o ka kenya IRS Foromo 15227 (`Application for an Identity Protection Personal Identification Number`) 'me mothusi oa IRS o tla u letsetsa ho netefatsa boitsebiso ba hau ka mohala; kapa (2) ho sa tsotellehe chelete e kenang, u ka etsa kemiso ea ho kopana le motho sebakeng se haufi le uena Setsi sa Thuso sa Lekhetho la IRS (`TAC`) ka ho bitsa 1-844-545-5640 le ho tlisa mefuta e 'meli ea boitsebiso ba mmuso.

Na senokoane se ka sebelisa W-2 eaka ho fetola ak'haonte ea ka ea banka faeleng le IRS kapa ho utsoa tlotla ea lehae la ka?¶

Hang ha u fumana IRS IP PIN ebe u batla ak'haonte ea hau ea inthanete ho irs.gov, senokoane se ke ke sa kena profaeleng ea hau ea IRS kapa sa fana ka tlaleho e ncha ho fetola ak'haonte ea hau ea banka eo u e busitseng ka kotloloho. Ha e le sehlooho sa lehae kapa bomenemene ba ntlo, ha W-2 e fana ka SSN ea hau le aterese ea lehae, lirekoto tsa thepa ea setereke li hloka li-signature tsa litokomane tse notarized; o ka ingolisa bakeng sa tlelereke ea hau ea setereke / motlalehi oa hau mahala Property Fraud Alert imeile tšebeletso tsebiso (e fanoa mahala ke lirekoto tse ngata tsa setereke sa US le Tlhokomeliso ea Thepa ea HM Land Registry UK) kahoo o fumana lengolo-tsoibila ka letsatsi leo tokomane efe kapa efe e rekotiloeng khahlano le sephutheloana sa hau.

Na k'hamphani ea rona e ka hlahisa li-W-2 tse ncha tsa "Corrected" (Form W-2c) ho basebetsi kamora ho dutla ha phishing ka W-2?¶

Che. Foromo ea IRS W-2c (`Corrected Wage and Tax Statement`) e sebelisoa feela ha lidolara, lebitso, kapa SSN e hatisitsoeng ho W-2 ea mantlha e ne e fosahetse ka lipalo kapa ka mokhoa o hlakileng. U ke ke ua fetola Nomoro ea Ts'ireletso ea Sechaba ea mosebeletsi kapa ea k'hamphani ea hau `EIN` ka a `W-2c`. Basebeletsi ba ntse ba tlameha ho sebelisa W-2 ea bona ea mantlha, e nepahetseng ho fana ka makhetho, ha tsebiso ea hanghang ea k'hamphani ea hau ho dataloss@irs.gov le ho ngolisoa ha basebetsi ho irs.gov/ippin sireletsa mokhoa oa ho kenya.

Litataiso tse amanang¶

• Khanyetso ea lengolo-tsoibila la Khoebo ea Khoebo (BEC) le ho hopola bosholu ba mohala
• Karabo ea bosholu ba boitsebiso
• Bosholu ba boitsebiso ba maiketsetso le mokoloto oa SSN oa bana o emisoa
• Ak'haonte ea lengolo-tsoibila e koetsoe, melao ea ho fetisa, le ho hlaphoheloa
• Karabelo ea tlolo ea data le ho lutla ha password
• scam ea tlhahiso ea mesebetsi e seng ea nnete, bosholu ba ho hlahloba lisebelisoa, le bosholu ba boitsebiso ba onboarding
• Linomoro tsa maemo a tshohanyetso ho ea ka linaha

Mehloli le tataiso ea semmuso¶

• Tšebeletso ea Lekhetho la ka hare (IRS) & Seboka sa Tšireletso (United States): Foromo ea W-2 / SSN Data Loss Incident Response Protocol (dataloss@irs.gov), Khatiso 4557 (Safeguarding Taxpayer Data: A Guide for Your Business), le Phatlalatso 5293 (Data Security Resource Guide for Tax Professionals).
• Tšebeletso ea Lekhetho la ka hare (IRS) Tšebeletso ea Bobuelli ba Lekhetho: * PIN ea Tšireletso ea Boitsebiso (IP PIN) Mekhoa ea ho Ngolisa le Foromo ea 14039 (Identity Theft Affidavit) Litaelo*.
• Federal Trade Commission (FTC) (United States): Melao ya ho Sireletsa Boitsebiso ba Bareki (FTC Safeguards Rule, 16 CFR Karolo ea 314) & IdentityTheft.gov Mehato ea ho Fumana Bosholu ba Lekhetho la Lekhetho.
• Mokhatlo oa Batsamaisi ba Lekhetho (FTA): Protocol ea Khokahanyo ea Tšebeliso ea Litšenyehelo tsa Data W-2 Lefapheng la Naha la Lekeno (StateAgencies@taxadmin.org).
• Federal Bureau of Investigation (FBI IC3): Liphatlalatso tsa Ts'ebeletso ea Sechaba mabapi le Payroll W-2 Business Email Compromise (BEC) Spear-Phishing le Direct Deposit Diversion.