October is Cybersecurity Awareness Month, and I’ve been reading about the latest scams and cyberthreats affecting businesses and individuals. One thing that stands out is how convincing these scams have become. Fraudulent emails, websites, and messages can look so authentic that even the most cautious person might be fooled. That’s why I believe it’s important to stay informed and take a few extra precautions. I’d like to share some tips to help you recognize potential threats, protect sensitive information, and reduce your risk of becoming a victim.
1. Think Before You Click
Be careful about clicking links or opening attachments in unexpected emails, texts, or direct messages. A message may appear to come from the IRS, your bank, a business you know, or even someone you trust. Clicking a fraudulent link can expose passwords, financial information, and other sensitive data.
Scammers frequently impersonate businesses, financial institutions, government agencies, and other trusted organizations. They may ask you to review a document, update account information, make a payment, or sign something electronically. These messages can look legitimate and may even contain familiar names, logos, and other information.
Before clicking on a link, stop and ask: Was I expecting this? Does the request make sense based on recent conversations? Is someone urging me to take immediate action? If anything seems suspicious, contact the supposed sender directly using a phone number or email address you already know is valid. Never click on a link unless you are confident it comes from a trusted source and leads to a legitimate website.
2. Strengthen Your Accounts and Devices
Protect sensitive tax and business records by storing them in secure locations with strong passwords and restricted access. Back up important files regularly to a secure cloud service or external drive so you can recover information if a device is compromised. Avoid using public Wi-Fi to access financial accounts or confidential information, and use a trusted, secure connection instead. Keep computers, mobile devices, and security software updated, and enable multifactor authentication whenever possible to add another layer of protection.
Learn to recognize phishing attempts through emails, text messages, and social media. Common warning signs include unfamiliar senders, misspelled email addresses, suspicious attachments, requests for personal or financial information, and messages that create a false sense of urgency. Some phishing attempts are highly sophisticated and may contain personal details that make them seem authentic. Stay alert and don’t let scammers catch you off guard. Never share sensitive information unless you are certain the person requesting it is legitimate and has a valid reason to receive it.
3. Look Closely at Websites and Financial Activity
A fraudulent website can look almost identical to a legitimate one. Fake shopping sites, financial websites, and login pages can use addresses that differ from legitimate sites by just one letter or character. Before entering a password, credit card number, or other sensitive information, check the web address carefully. If you accessed the site through a link in a message and have any doubts about its authenticity, close the page and go directly to the company’s official website or trusted app.
Turn on alerts for your bank and credit card accounts so you can quickly spot purchases, transfers, password changes, or other activity you did not authorize. Regularly review checking and savings accounts, debit card transactions, PayPal, and other payment apps to confirm that charges and transfers are real. Review your credit reports for accounts or activity you do not recognize. If you notice suspicious activity, contact your bank or card issuer immediately to secure your accounts. Consider freezing your credit reports as well to help prevent fraudulent accounts from being opened in your name.
4. Be Suspicious of Unusual Payment Requests
Pay close attention when someone asks you to change how you make a payment or transfer money. Requests for gift cards, cryptocurrency, wire transfers, or payment apps like Venmo or Zelle should raise red flags, especially when someone pressures you to act immediately.
A scammer may pretend to represent your bank, a government agency, or a company you know—or even impersonate someone you trust. If you are told to move money to protect an account, avoid a penalty, or address an emergency, verify the situation independently before sending anything.
5. Know How the IRS Communicates
The IRS generally makes initial contact with taxpayers by mail. It sends emails or texts only when taxpayers opt in and never sends direct messages. The IRS will not call to demand immediate payment, threaten arrest, or unexpectedly tell you that you are due a refund.
Your tax refund could be at risk if a criminal steals your Social Security number and files a fraudulent tax return in your name. Filing your return early can help reduce the opportunity for someone else to claim your refund first. For added protection, the IRS offers a six-digit Identity Protection PIN that helps prevent unauthorized tax returns from being filed using your Social Security number or individual taxpayer identification number.
Sal’s Advice: Make Verification a Habit
One of the most important things you can do is verify requests before acting. If someone asks you to provide sensitive information, change payment instructions, transfer money, or access an account through a link, confirm the request directly with the person or organization involved.
Train employees to recognize and respond to potential cybersecurity threats. This includes identifying suspicious emails, texts, and other messages, avoiding questionable links or attachments, and knowing how to handle unusual payment instructions or inquiries involving confidential information. Establish a clear verification process so everyone knows whom to contact before responding or acting.
Apply the same precautions to your personal finances. Check bank and credit card accounts regularly, and set up alerts for purchases, withdrawals, and changes to account information. Review transactions as they occur rather than waiting for monthly statements. If you notice an unfamiliar charge or suspicious activity, contact your financial institution immediately. These simple steps can help you catch fraud early and limit potential losses.
If government agencies, major financial institutions, and multinational corporations can fall victim to cyberattacks, so can anyone else. Data breaches and cybercrime affect organizations of every size, as well as individuals. While no security measure can eliminate every threat, good habits, employee training, and sound judgment can make it harder for criminals to succeed. The strongest defense combines technology with awareness and a willingness to question anything that seems suspicious.
At Lawson, Rescinio, Schibell & Associates, protecting our clients’ sensitive information is a priority. If you receive a communication that appears to come from our firm and something does not seem right, please contact us directly to confirm its authenticity before responding or sharing any information. Taking a few moments to verify a suspicious communication can help prevent serious financial and personal consequences.
For more information, contact Sal Schibell, CPA, CFP®, MBA, Master of Science in Taxation, Tax Partner, at (732) 539-7328 or salschibell@LRScpa.com.