Chris Huntington with Nexigen, a tech security firm in Newport, said at least 100 of his clients around Cincinnati have been reporting these W-2 scam emails for weeks

Hide Transcript Show Transcript

WEBVTT A HE SAYS AT LEAST 100 OFHIS CLIENTS AROUND CINCINNATIAND THE TRI-STATE HAVE BEENREPORTING THESE W-2 SCAM EMAILSFOR WEEKS.TONIGHT, HE TOLD US EXACTLY WHATWE SHOULD ALL BE WATCHING FOR.WHEN IT COMES TO TAX TIME +>> IT'S JUST A LOT TO THINKABOUT. THAT'S WHY I HAVE A CPA WHOTAKES CARE OF MY TAXES.DAN: MANY OF US HAVE LITTLEPATIENCE.>> IT'S A LITTLE ANNOYING TOWAIT FOR THE FORMS SOMETIMES,ESPECIALLY WITH US HAVING TO PAYBACK OUR LOANS AND STUFF.WE WOULD LIKE TO FILE OUR TAXESEARLIER.DAN: CHRIS HUNTINGTON FROM TECHSECURITY FIRM NEXIGEN IN NEWPORTSAYS IT'S TIME FOR ALL OF US TOPAY EXTRA ATTENTION TO OUR TAXDOCUMENTS.>> WE'VE SEEN OVER 100 CLIENTSCALL IN ASKING ABOUT THIS EMAIL.DAN: HE SAYS A W-2 SCAM POPPINGUP IN INBOXES ACROSS THE NATIONIS ALSO HERE AT HOME.>> EITHER ASKING THE COMPANY FORW-2 INFORMATION OR ASKING THEMTO CLICK ON A LINK AND FILL OUTAN UPDATE TO THEIR INFORMATIONTO GET THEIR W-2 CORRECTED.DAN: HE SAYS THE EMAILS LOOKOFFICIAL AND CAN COME TO YOU,YOUR H.R. DEPARTMENT AT WORK, OROTHERS WITH ACCESS TO W-2S.HUNTINGTON SAYS IN AT LEAST ONECASE, H.R. EMAILED DOZENS OFW-2S.THE LINKS CAN ALSO DOWNLOADMALWARE.>> PEOPLE ARE LOSING THEIRIDENTITIES, PEOPLE ARE FINDINGTHERE ARE CREDIT CARDS THAT ARESET UP IN THEIR NAME, AND THATTAX RETURNS HAVE ALREADY BEENFILED FOR THEM AND A REFUNDALREADY PROCESSED.DAN: BUT HE SAYS YOU CAN FIGHTBACK.VERIFY EVERYTHING.CALL THE SENDER ON THE PHONE,CHECK THE SENDER'S E-MAILADDRESS, DON'T CLICK ANY LINKS,AND NEVER EMAIL W-2S.IT'S ADVICE MANY WILL BE PASSINGALONG.>> I PROBABLY WOULDN'T EVEN OPENIT.STRAIGHT TO MY SPAM OR, YOUKNOW, TRASH CAN.IT'S JUST A LITTLE TOO SHADY.DAN: HUNTINGTON SAYS YOU WILLTYPICALLY NOTICE THESE SPAMEMAILS COMING FROM ADDRESSESWHERE FREE E-MAIL ACCOUNTS CANBE MADE LIKE AT YAHOO.COM ORHOTMAIL.COM, NOT FROM YOUROFFICIAL COMPANY ADDRESS.AS ALWAYS, WATCH FOR BAD GRAMMARTOO.

Advertisement NKY tech security firm warns of impact from W-2 email scam Chris Huntington with Nexigen, a tech security firm in Newport, said at least 100 of his clients around Cincinnati have been reporting these W-2 scam emails for weeks Share Shares Copy Link Copy

There's a phishing scam that has made its way into email inboxes across Greater Cincinnati. It's well-timed because it asks for W-2s and personal information as people rush to file their taxes. We spoke with a tech expert who said the problem only seems to be spreading. Chris Huntington with Nexigen, a tech security firm in Newport, said at least 100 of his clients around Cincinnati have been reporting these W-2 scam emails for weeks. He shared what we should all be watching for. When it comes to tax time, many of us have little patience. "It's just a lot to think about. That's why I have a CPA who takes care of my taxes," John Garcia said. Some can't get the necessary forms fast enough. "It's a little annoying to wait for the forms sometimes, especially with us having to pay back our loans and stuff. We'd like to file our taxes earlier," Emerlee Anderson said. Huntington said it's time for all of us to pay extra attention to securing our tax documents and information. "We've seen over 100 clients call in asking about this email," he said. He said a W-2 scam popping up in inboxes across the nation is also here at home. "Either asking the company for W-2 information or asking them to click on a link and fill out an update to their information to get their W-2 corrected," he said. He said the phishing scam emails look official and can come to you, your human resources department at work or others with access to W-2s. Huntington said in at least one case, an HR official emailed dozens of W-2s. The links can also download malware. "People are losing their identities, people are finding there are credit cards that are set up in their name and that tax returns have already been filed for them and a refund already processed," Huntington said. But he said you can fight back. Huntington said you should verify everything, call the sender on the phone, check the sender's email address, don't click any links and never email W-2s. He said you will typically notice spam emails coming from addresses where free email accounts can be made, like at Yahoo.com or Hotmail.com. Huntington said the emails will not come from your official company address. Another red flag is poor grammar in the text of the email. It's advice many will be passing along. "I probably wouldn't even open it. Straight to my spam or you know, trash can. It's just a little too shady," Garcia said. Huntington said Nexigen also simulated the email with its clients. It found about 10 percent of people clicked the link to give over information or download malware. The company is working with clients to teach their employees how to avoid compromising themselves and their workplaces.