‘New client’ email scam targets tax pros

Tax professionals should watch out for a “new client” email scam in which cybercriminals pose as potential clients.

Warning that this scam peaks during the busy season, the IRS said that typically a scammer emails a tax pro to ask for help with their taxes. This phishing email has a malicious link or attachment that the scammer claims is their tax information.

When the tax pro clicks the link or opens the attachment, the scammer gets access to the preparer’s email address, password and possibly other information. Some scammers may also load malware onto the tax pro’s computer to gain access to their system and to client data. Scammers may also use the tax professional’s hacked email account to target clients.

What to look for

Last month, the IRS said the new-client scam features several red flags, including awkwardly phrased sentences and odd word usage. With access to a stolen email account, however, scammers can find a legitimate email from a previous victim’s email account between the victim and their tax preparer. This email might have no grammatical or spelling mistakes or reference what appear to be legitimate tax issues; it will then repurposed as part of the new client phishing scam.

The subject line will often reference the current tax season and the underlying message will amount to the sender needing someone to “help prepare their taxes.”

One of example of a current new-client scam:

Subject: 2024 Tax Submission
Hello,
My name is (name can vary), I am searching for another CPA to help handle my taxes.
Is it safe to say that you are accepting new clients for the 2024 tax season? Do you additionally assist with IRS representation?
I figured I may have an issue with last year’s return. (Click) HERE TO VIEW MY CREDENTIAL [Link to a phishing web address]
Upon your approval, we can arrange a physical or virtual meeting to discuss my situation and also provide my tax documents amongst others.
Kindly prompt how you plan to push ahead.
Best Regards,
(Name varies)