Posted 2 years ago - by

Attention HR Departments: Beware of Phishing Scams

The internet can be a powerful but scary tool. With technology constantly advancing, our way of communication has improved over the years. This has been heavily highlighted with the current landscape that COVID-19 has created. Many companies have shifted to remote work and are more vulnerable than ever.

These arrangements can put networks at high risk for online scams as the connections from home may not be as secure as the ones at a physical workplace location. In fact, cyber-attacks have increased by 350% during the pandemic.

HR and Tax departments of companies are a prime target since they are privy to the most confidential information. Although we advise being skeptical of suspicious emails year-round, businesses can be more susceptible during holiday and tax seasons.

Phishing 101

First, what is phishing? As defined, “a cybercrime in which a target or targets are contacted via email, telephone, or text message by someone posing as a legitimate and reputable institution or person to persuade individuals to reveal personally identifiable information, banking and credit card details, and passwords.”

In other words, you may receive an email, phone call, or text message from someone that could be posing as a coworker, a boss, a friend, a family member, even the IRS, asking for sensitive information.

When this happens to businesses, it is referred to as a business email compromise/business email spoofing (BEC/BES).

Email Scams to Look Out For 

  1. Emails requesting a bank account change for payroll direct deposit
  2. Emails requesting wire transfers into a bank account
  3. Emails requesting copies of W-2s to intercept employee information (names, addresses, and SSNs)

These emails are generally impersonating a real company employee, often an executive, and are sent to payroll or the appropriate HR personnel who would be able to authorize the release of that information. For scenarios 1 and 2 above, the thief posing as the employee/executive will provide the new bank account information making it a seamless crime.

Although HR departments are a prime target due to their access to sensitive data, there is no real target industry or type of employer that hackers/scammers are contacting. This is relevant to all types of businesses whether you manage or own a hotel, restaurant, medical practice, construction company, etc.

How to Detect BEC/BES

You might be questioning how to tell if the email you receive is false. Don’t worry – there are several subtle clues to look out for. Make sure to read the email carefully before following through with the request. Often, email scams contain grammar and spelling mistakes within the body.

For examples of what BEC/BES may look like when they land in your inbox, check out the IRS alert here.

If a scammer has been able to compromise an executive’s email account, the domain would look almost identical. A spoofed email domain could look like any of the following:

  • … instead of … (rearranged letters)
  • … instead of … (underscore instead of a hyphen)
  • There has been a letter replacement: “m” with an “r” and an “n” – or

You can also hover over links within the body of the email, if any, to verify whether the URLs are safe before clicking. Usually, if the website is unrecognizable or if the “http” lacks an “s” – “http://” vs “https://”, this may be a cause for concern.

If you notice any of these subtle clues, refrain from clicking any links or responding, and notify the sender through different means to confirm whether they sent you the email.

What to do Upon Identifying a BEC/BES Email

  • Forward non-tax related BEC/BES email scams to the Internal Crime Compliant Center (IC3) – monitored by the FBI
  • Forward tax-related phishing emails to – monitored by IRS cybersecurity professionals
  • If you are an employer impacted by the W-2 scam, forward the email to
  • If you are an employer who received a form W-2 scam, but you did not click or respond to the email, for that email to

For other preventative steps to take when it comes to email communication, read our blog on email encryption.

Get expert HR and payroll assistance. Contact Payroll Systems and let one of our payroll specialists walk you through our easy-to-scale solutions for your business.

Related Posts

5 Ways Workforce Management Systems Help Your Business Thrive

Workforce Management Systems helps organizations automate processes crucial to running a business By streamlining these processes, employers can maximize performance levels like employee productivity...


3 HR Compliance Issues for the Construction Industry and Their Solutions

The construction industry will always carry its own set of compliance rules that employers need to abide by Employers within the construction industry have a lot to keep up with as they must comply...


Payroll Management Optimization: 8 Strategies for a Successful Business

Managing payroll is a major part of running a business Although it may seem daunting at times, it is important to take a good, long look at your company’s payroll management to see how you can...


How to Better Maintain I-9 Documentation Compliance With Onboarding Software

In March of 2020, the US Immigration and Customs Enforcement (ICE) began issuing extensions to a policy that allowed employers to inspect form I-9 documents virtually The last extension was to go...


How To Write The Perfect Offer Letter to A Potential Job Candidate

A company’s hiring process is a crucial part of the employee lifecycle that requires thoughtful consideration and effort to land the right candidate Writing an employment offer letter plays a...


OSHA Announces New Program for Reducing Heat-Related Injuries

In April of 2022, The Occupational Safety and Health Administration (OSHA) launched a new initiative that aims to prevent heat-related injuries and illnesses The program focuses on industries that...


This article provides general information and shouldn’t be construed as legal or HR advice. Since employment laws may change over time and can vary by location and industry, please consult a lawyer or HR expert for advice specific to your business. You can also contact Payroll Systems to inquire about our HR support services.