Iowa State University

ITInformation Technology

IRS Issues Warning Regarding W-2 Phishing Scam

This news item expired April 15, 2017. It may contain out-of-date information.

The Internal Revenue Service (I.R.S) posted a warning on Jan. 25, 2017 about a W-2 phishing scam making its way across the nation.

This particular scam first appeared last year and attempts to con employees into divulging personal data including employee names, social security numbers (SSN), and income information.

The phishing emails are “spoofed”, which means the email will appear to come from an official’s or supervisor’s email address, while in reality it is sent by a cybercriminal.

If you receive an email from your supervisor asking you to send W-2 or other personal information via email, do not do so. Instead, speak to the supposed sender and determine if they indeed sent the email. If not, forward it immediately to abuse@iastate.edu and phishing@irs.gov. Files containing social security numbers, such as W-2s, should never be sent via email.

Please call or email the Solution Center at 515-294-4000 or solution@iastate.edu with any questions.

For more information about handling SSNs at Iowa State, visit the Iowa State SSN Protection Policy webpage, and for more information on email confidentiality, review the Registrar’s Confidential Email Policy.