National Tax Security Awareness Week No. 1: Online Security - Seven Steps for Safety
Atlanta – A Security Summit consisting of the Georgia Department of Revenue (DOR), the Internal Revenue Service (IRS), other state tax agencies and the tax community, is marking “National Tax Security Awareness Week”, Nov. 27-Dec.1, with a series of reminders to taxpayers and tax professionals. Part one of a five-part series highlights online security.
During the online holiday shopping season, Security Summit partners are reminding people to be vigilant with their personal information. While most individuals are shopping for gifts, criminals are shopping for credit card numbers, financial account information, Social Security numbers and other sensitive data that could help them file a fraudulent tax return.
Anyone who has an online presence should take a few simple steps to protect their identity and personal information.
Cybercriminals seek to turn stolen data into quick cash, either by draining financial accounts, charging credit cards, creating new credit accounts or even using stolen identities to file a fraudulent tax return for a refund.
Here are seven steps to help with online safety during this holiday season and the upcoming 2018 tax filing season:
- Shop at familiar online retailers. Generally, sites using the “s” designation in “https” at the start of the URL are secure. Look for the “lock” icon in the browser’s URL bar. But remember, even bad actors may obtain a security certificate so the “s” may not vouch for the site’s legitimacy.
- Avoid unprotected Wi-Fi. Beware purchases at unfamiliar sites or clicks on links from pop-up ads. Unprotected Wi-Fi hotspots may allow thieves to view transactions. Do not engage in online financial transactions if using unprotected Wi-Fi.
- Learn to recognize and avoid phishing emails that pose as a trusted source such as those from financial institutions or the IRS. These emails may suggest a password is expiring or an account update is needed. The criminal’s goal is to entice users to open a link or attachment. The link may take users to a fake website that will steal usernames and passwords. An attachment may download malware that tracks keystrokes.
- Keep a clean machine. This applies to all devices -- computers, phones and tablets. Use security software to protect against malware that may steal data and viruses that may damage files. Set it to update automatically so that it always has the latest security defenses. Make sure firewalls and browser defenses are always active. Avoid “free” security scans or pop-up advertisements for security software.
- Use passwords that are strong, long and unique. Experts suggest a minimum of 10 characters but longer is better. Avoid using a specific word; longer phrases are better. Use a combination of letters, numbers and special characters. Use a different password for each account. Use a password manager, if necessary.
- Use multi-factor authentication. Some financial institutions, email providers and social media sites allow users to set accounts for multi-factor authentication, meaning users may need a security code, usually sent as a text to a mobile phone, in addition to usernames and passwords. For added protection, some financial institutions also will send email or text alerts when there is a withdrawal or change to the account. Generally, users can check account profiles at these locations to see what added protections may be available.
Encrypt and password-protect sensitive data. If keeping financial records, tax returns or any personally identifiable information on computers, this data should be encrypted and protected by a strong password. Also, back-up important data to an external source such as an external hard drive. And, when disposing of computers, mobile phones or tablets, make sure to wipe the hard drive of all information before trashing.
There are also a few additional steps people can take throughout the year to make sure they have not become an identity theft victim.
Register with the Georgia Tax Center (GTC) and sign up for notifications to see when your refund is issued or a return is received with your Social Security Number.
Receive a free credit report from each of the three major credit bureaus once a year. Check it to make sure there are no unfamiliar credit changes. Create a “My Social Security” account online with the Social Security Administration. There users can see how much income is attributed to their SSN. This can help determine if someone else is using the SSN for employment purposes.
The IRS, state tax agencies, and the tax industry are committed to working together to fight against tax-related identity theft and to protect taxpayers. Visit the “Taxes. Security. Together.” awareness campaign or review IRS Publication 4524, Security Awareness for Taxpayers, to see what can be done.
Name: William Gaston
Phone: (404) 417-2286
Cell: (470) 725-5265
Email address: firstname.lastname@example.org