Tax Refund Scams – Know What to Look For

Tis the season!  You’re making mental plans with what is hopefully a generous tax refund and deciding what to do with the surplus of cash you’ll soon have on hand.

Along the way from starting to submitting the paperwork, there are quite a few roadblocks to be aware of.  Even if you aren’t getting a refund, your personal information is as valuable as the money you’re hoping for to scammers, so be on high alert.  A compromise of this nature can expose so much personal information from social security number to bank account detail, and undoing that damage can be timely and expensive.

Before you even get started, be educated and informed in who you trust with your taxes.  Don’t let your guard down because it’s the last minute and you haven’t had anything prepared.  You can file an extension to give yourself more time, and you can also find trustworthy people – even at the final hour.  The IRS warns of “ghost” tax preparers that are a high risk for scams and illegal tactics.  This individual is paid to prepare your taxes but won’t sign or identify themselves on paper or electronically.  They offer to do the work, print it out, then have you sign it as if you’ve done the work yourself – keeping them off the books and under the radar.  This service runs a high risk of fraud, illegitimate information being submitted, and a possibility of your funds being redirected to their account. Never trust someone that you have not fully vetted or someone who will not take on accountability for their work.  Even if they come at the recommendation of a friend or colleague.

The risks don’t stop once you’ve completed your returns.  You’ve done the paperwork, submitted everything on time, and now you wait.  And then one day the phone rings and the other voice identifies themselves as an employee of the IRS.  You brace yourself, what is wrong? What did you forget to complete?  You may be informed that your return is ready, and they need your bank information, or that the money was deposited into the wrong account.  Or maybe you are being threatened with legal action from the person on the other end due to your actions.

This is 100% of the time, not a legitimate IRS employee.  Do not give them any information, do not even engage in the conversation.  The IRS will not call you for your bank details and they will not make a mistake that they want you to correct with updated personal details.  Hang up, and if you are concerned, contact the IRS directly from the information on their government website.

This topic of taxes, government involvement, and any type of financial gain or loss puts most people at a heightened level of stress and responsiveness.  Don’t let that give a criminal easy access to your vulnerabilities.  Always take a moment to get the details, process the information, and make sure that you are working with legitimate and trustworthy people.

AI Usage Transparency Report

Pre-AI Era · Written before widespread use of generative AI tools

AI Signal Composition

Rep Tone Struct Instr
Repetition: 33%
Tone: 52%
Structure: 45%
List: 0%
Instructional: 8%
Emoji: 0%

Score: 0.03 · Low AI Influence

Summary

Be cautious of tax scams, especially during peak season. Verify the identity of tax preparers and be wary of unsolicited phone calls from the IRS.

Related Posts

How I Finally Passed the PMP Exam (After 12 Years of Waiting)

Back in 2013, I registered for a PMI membership with every intention of pursuing my PMP certification. I downloaded the handbook, bookmarked the eligibility requirements, and even told a few friends that I was going to do it "soon." At the time, I thought getting certified would be a straightforward process, but little did I know what lay ahead in terms of studying and preparation.

Read more

The Evolution of Apple Certification: A Journey Through Versions, Challenges & Growth

When I recently passed the Apple Certified Support Professional (ACSP) exam again, I paused to reflect — not just on this milestone, but on the long path I’ve walked through Apple’s certification landscape. My first certification dates back to macOS 10.5, and over the years, I’ve earned credentials across nearly every version since. In that time, the exams — and Apple itself — have transformed significantly.

Read more

Secure Software, Secure Career: How I Passed the CSSLP

After passing the CISSP earlier this year, I decided to follow it up with the **Certified Secure Software Lifecycle Professional (CSSLP)** certification. For those unfamiliar, CSSLP is an ISC2 certification that focuses specifically on secure software development practices across the full SDLC—from requirements and design to coding, testing, deployment, and maintenance. My goal in pursuing this certification was to further develop my skills in ensuring the security of software throughout its entire lifecycle.

Read more

Managing Bring Your Own Device (BYOD) for Android with Microsoft Intune

Alright, so today we're going to be talking about the management of bring your own device BYOD for Android devices. There's a lot of information out there for the management of iOS devices and you can do that with pretty much any Apple MDM on the market. We just happen to use Jamf where I work, but you could use anything from Braavos to SimpleMDM to Kanji or JumpCloud. Mosyle is also a great option.

Read more

BYO with me in 2025: iOS with User Enrollment in JAMF Pro

It really depends on your company's needs. For example, many companies need to hire 1099 contractors and in such a case they come with their own devices but not the correct security settings or enforcements. Remember BYOD is a security construct. The idea here is that you should be securing the company's sensitive data in all forms. This may involve implementing policies for contractor-owned devices, ensuring that all devices accessing company data meet minimum security standards, and regularly reviewing and updating these standards to stay ahead of emerging threats.

Read more

Securing BYOD Email Access: Exploring Strategies in Microsoft 365

In today’s mobile-first world, organizations increasingly rely on Bring Your Own Device (BYOD) programs to empower employees while optimizing costs. However, this flexibility introduces unique challenges, particularly around securing email access. To mitigate risks, we are implementing a comprehensive strategy to block email access on non-company devices by default and ensure only sanctioned apps can access organizational email accounts. This approach will help prevent unauthorized access and data breaches, aligning with our commitment to maintaining the security and integrity of company communications.

Read more

How I Conquered the CISSP Exam: 9 Months, Top Resources, and Proven Strategies

Passing the CISSP (Certified Information Systems Security Professional) exam is no small feat. It’s known for its breadth, depth, and ability to test not just your knowledge but your practical understanding of cybersecurity. After nine months of intense preparation, I’m thrilled to say I’ve joined the ranks of CISSP-certified professionals! Here's a detailed account of my experience, including the resources I used, some tips that helped me along the way, and what I learned from the process itself.

Read more

Get more out of scripting than you may expect

Expect is an extension to the Tcl scripting language written by Don Libes. The program automates interactions with programs that expose a text terminal interface. Expect, originally written in 1990 for the Unix platform, has since become available for Microsoft Windows and other systems. Its functionality allows users to interact with these programs through scripted commands, eliminating the need for manual input.

Read more