Cybersecurity Awareness Month: IRS Tips to Protect Tax Data

October is Cybersecurity Awareness Month, and the IRS encourages taxpayers to make online security a daily habit. Simple steps can help protect personal, financial and tax information from identity thieves and scammers. Together with the Cybersecurity and Infrastructure Security Agency (CISA) and Security Summit partners, the IRS promotes cybersecurity resources and practices to use year-round.

Simple Steps to Strengthen Security

The IRS recommends these security habits at work and at home:

• Use strong, unique passwords and a password manager.
• Enable multifactor authentication.
• Keep devices and software updated automatically when possible.
• Report scams and be cautious of urgent, unexpected messages.
• Store tax records securely, encrypt sensitive files and back up important information.
• Use secure networks, not public Wi-Fi, for financial accounts, tax records and IRS services.

Why Vigilance Matters

These habits help protect against IRS impersonators promising bigger refunds or demanding immediate payment. The IRS typically contacts taxpayers by mail, not calls wanting payment or threatening arrest.

Payroll and HR teams also face phishing, fake invoices, and W-2 scams. Verify requests to change employee or payment details through a trusted channel. Consider an IRS identity protection PIN to help prevent fraudulent tax returns and report suspicious tax-related messages at IRS.gov/SubmitATip.

Looking Forward

Cybersecurity matters beyond October. Practice these habits, verify unusual requests and report suspicious activity to help protect yourself, your co-workers and your employer’s data year-round. Download the bulletin for more details.