Scams are becoming more sophisticated, and artificial intelligence is making it easier for criminals to create messages that look and sound remarkably real.
We want our clients to be especially careful with emails, text messages, phone calls, and online documents that appear to come from someone they know.
A message can look completely legitimate and still be a scam.
In the past, many scam emails were easy to spot because they contained poor spelling, strange wording, or obviously suspicious requests.
That is changing.
Criminals can now use artificial intelligence to create highly personalized messages. If they gain access to someone's email account, they may be able to read previous conversations and determine:
Who you communicate with
What you have been discussing
What documents you normally exchange
Names of clients, employees, vendors, or family members
The tone and wording normally used in your conversations
What the logical next step in the conversation might be
The scammer can then create a message that appears to be a natural continuation of a legitimate conversation.
For example, you might receive an email that appears to be from someone you have been working with saying:
"Here is the document we discussed. Please take a look when you have a chance."
The message may contain a Dropbox, OneDrive, Google Drive, or other file-sharing link.
Because the message fits an actual conversation you have been having, it may be much harder to recognize as fraudulent.
A link to a familiar service does not necessarily mean the message is legitimate.
Scammers can use legitimate file-sharing services, or create fake websites that look like familiar services, to trick you into entering your email address and password.
Be particularly cautious when a message asks you to:
Review a document you were not expecting
Sign a document
Download a tax document
View a shared folder
"Verify" your account
Re-enter your password
Open an unexpected PDF or other attachment
Click a link to access a file
If you were not expecting the document, verify it before clicking.
You can always call our office to verify if we have sent you the document or link.
If a criminal gains access to someone's email account, they may not simply send spam from it.
They may quietly monitor conversations and use information from real emails to impersonate the account owner.
This can lead to highly convincing requests involving:
Bank account changes
Invoices and payments
Tax documents
W-2s and 1099s
Social Security numbers
Business information
Wire transfers or ACH payments
Password resets
Shared documents
If you receive an unusual request involving money, banking information, passwords, or sensitive documents, do not rely solely on the email conversation to verify it.
Call the person using a phone number you already have and trust.
The IRS continues to warn taxpayers about impersonation scams involving email, text messages, phone calls, social media, and fake websites.
Scammers may claim that:
You are owed a refund
Your tax return has a problem
You need to verify your identity
Your IRS account will be suspended
You owe an immediate payment
You need to provide personal information
You have an unclaimed refund
The IRS also warns about fake QR codes and AI-generated impersonation calls.
Do not click links in unexpected IRS messages or provide personal or financial information in response to them.
When in doubt, go directly to the official IRS website by typing IRS.gov into your browser rather than using a link in an email or text.
Social media has become another source of tax scams.
Be cautious of videos, posts, advertisements, or individuals claiming that you can receive a large refund by using a "secret" deduction, special credit, or little-known tax loophole.
The IRS has specifically warned taxpayers about misleading tax advice circulating on social media.
Before claiming an unfamiliar tax credit or deduction, ask a qualified tax professional about it.
Artificial intelligence can also be used to imitate someone's voice.
You may receive a phone call that sounds like a family member, business associate, employee, client, or another person you know.
If the caller asks for money, passwords, account information, gift cards, wire transfers, or other sensitive information, stop and independently verify the request.
Hearing a familiar voice is no longer enough to prove who is calling.
If you receive an unusual request that appears to come from our office involving:
Bank account information
Direct deposit information
Payments
Passwords
Login credentials
Sensitive tax information
Social Security numbers
Tax documents
Changes to previously provided information
Please contact our office directly before taking action.
If you receive an email that appears to be from us but seems unusual, do not click the link or open the attachment until you have verified it with us.