National Tax Security Awareness Week: Thieves Use W-2 Scam to get Employee Data

The IRS warns the nation’s business, payroll and human resource communities about a growing W-2 email scam. Criminals use this scheme to gain access to W-2 and other sensitive tax information that employers have about their employees.

This tip is part of National Tax Security Awareness Week. The IRS is partnering with state tax agencies, the tax industry and groups across the country to remind people about the importance of data protection.

This W-2 scam puts workers at risk for tax-related identity theft. The IRS recommends that all employers educate employees about this scheme, especially those in human resources and payroll departments. These employees are usually the first targets. Here are five warning signs about the W-2 scam:

• The thief poses as a company executive, school official or other leader in the organization.
• These scam emails often start with a simple greeting. It can be something like, “Hey, you in today?”
• The crook sends an email to one employee with payroll access. The sender requests a list of all employees and their Forms W-2. The thief may even specify the format in which they want the information.
• The thieves use many different subject lines. The criminal might use words like “review,” “manual review” or “request.” In some cases, the thief may send a follow up email asking for a wire transfer.
• Because payroll officials believe they are corresponding with an executive, it may take weeks for someone to realize a data theft occurred. The criminals usually try to use the information quickly, sometimes filing fraudulent tax returns within a day or two.

This scam is such a threat to taxpayers and to tax administration that a special IRS reporting process has been set up. Anyone who thinks they were a victim of this scam can visit Form W-2/SSN Data Theft: Information for Businesses and Payroll Service Providers to find out how to report it.

More Information:

• Taxes. Security. Together
• Protect Your Clients; Protect Yourself
• Don’t Take the Bait

National Tax Security Awareness Week No. 4: Employers, Payroll Officials, Avoid the W-2 Email Scam

The IRS, state tax agencies and private-sector tax groups warned the nation’s business, payroll and human resource communities about a growing W-2 email scam that threatens sensitive tax information held by employers.

These emails may start with a simple, “Hey, you in today?” and, by the end of the exchange, all of an organization’s Forms W-2 for their employees may be in the hands of cybercriminals. This puts workers at risk for tax-related identity theft.

The W-2 scam has emerged as one of the most dangerous and successful phishing attacks as hundreds of employers and tens of thousands of employees fell victim to the scheme in the past year. This scam is such a threat to taxpayers that a special IRS reporting process has been established.

The Internal Revenue Service, state tax agencies and the tax community -- partners in the Security Summit -- are marking “National Tax Security Awareness Week” with a series of reminders to taxpayers and tax professionals. In part four, the topic is the W-2 scam.

Because the Security Summit partners have successfully made inroads into stopping stolen identity refund fraud, criminals now need more information to file a fraudulent return. That means they need more accurate data about taxpayers, causing them to target tax practitioners, payroll professionals and employers. The Form W-2 contains income and withholding information necessary to file a tax return.

All employers are at risk. In 2017, the W-2 scam made victims of businesses large and small, public schools and universities, as well as tribal governments, charities and hospitals. The scam, which grows larger each year, will likely make the rounds again in 2018.

The Security Summit warns employers – in public and private sectors – to beware of this scheme and to educate employees, especially those in human resources and payroll departments who are often the first targets.

This is an example of a business email compromise or business email spoofing in which the thief poses as a company executive, school official or someone of authority within the organization. The crook will send an email to one employee with payroll access, requesting a list of all employees and their Forms W-2. The thief may even specify the format in which he wants the information. The subject line has hundreds of variations along the lines of “review,” “manual review” or “request.”

Because payroll officials believe they are corresponding with an executive, it may take weeks for someone to realize a data theft has occurred. Generally, the criminals are trying to quickly take advantage of their theft, sometimes filing fraudulent tax returns within a day or two.

Because of the W-2 scam’s threat to tax administration for both federal and state governments, a special reporting process has been established to quickly alert the IRS and state tax agencies. Detailed reporting steps may be found at Form W-2/SSN Data Theft: Information for Businesses and Payroll Service Providers.

Here’s an abbreviated list of how to report these schemes:

• Email dataloss@irs.gov to notify the IRS of a W-2 data loss and provide contact information. In the subject line, type “W2 Data Loss” so that the email can be routed properly. Do not attach any employee personally identifiable information data.
• Email the Federation of Tax Administrators at StateAlert@taxadmin.org to get information on how to report victim information to the states.
• Businesses/payroll service providers should file a complaint with the FBI’s Internet Crime Complaint Center (IC3.gov). Businesses/payroll service providers may be asked to file a report with their local law enforcement agency.
• Notify employees so they may take steps to protect themselves from identity theft. The Federal Trade Commission’s www.identitytheft.gov provides guidance on general steps employees should take.
• Forward the scam email to phishing@irs.gov.

Employers are urged to put steps and protocols in place for the sharing of sensitive employee information such as Forms W-2. One example would be to have two people review any distribution of sensitive W-2 data or wire transfers. Another example would be to require a verbal confirmation before emailing W-2 data. Employers also are urged to educate their payroll or human resources departments about these scams.

As part of the Security Summit effort, the IRS, state tax agencies and the tax industry working together to fight against tax-related identity theft and to protect taxpayers. Everyone can help. Be alert and guard against the W-2 scam.

Taxpayers are also encouraged to visit the “Taxes. Security. Together.” awareness campaign or review IRS Publication 4524, Security Awareness for Taxpayers, to learn more.

National Tax Security Awareness Week: Five Steps Data Breach Victims Can Take

Every day, data thefts put people’s personal and financial information at risk. There are steps that identity theft victims can take to protect their financial accounts, their identities and their tax returns.

This tip is part of National Tax Security Awareness Week. The IRS is partnering with state tax agencies, the tax industry and groups across the country to remind people about the importance of data protection.

Generally, thieves want to use the stolen data as quickly as possible. That may mean selling the data on the Dark Web for use by other criminals. It may also mean the crook tries to withdraw money from bank accounts or charge credit cards. A thief might also try to file a fraudulent tax return using victims’ names for a refund.

People who are the victim of a data breach should consider these five steps to help protect their sensitive information that can be used on a tax return:

• If possible, the victim should try to determine what information the thieves compromised. Victims can try to find out if the criminals accessed emails and passwords, or more sensitive data such as name and Social Security number.
• Breached companies often offer credit monitoring services to victims. Victims should consider taking advantage of these offers.
• Victims should place a freeze on credit accounts to prevent access to credit records. There may be a fee that varies by state. At a minimum, victims should place a fraud alert on their credit accounts by contacting one of the three major credit bureaus. A fraud alert on credit records is not as secure as a freeze, but a fraud alert is free.
• Victims should reset passwords on online accounts. It is especially important to reset passwords of financial sites, email and social media accounts. Some experts recommend at least 10-digit passwords mixing letters, numbers and special characters. People should use different passwords for each account, using a password manager or password app if necessary.
• People should use multi-factor authentication when available. Some financial institutions, email providers and social media sites allow users to set their accounts for multi-factor authentication. This means users may need a security code, usually sent as a text to their mobile phone, in addition to a username and password.

More Information:

• Taxes. Security. Together.
• Protect Your Clients; Protect Yourself
• Don’t Take the Bait

National Tax Security Awareness Week No. 3: Victims of Data Breaches Should Consider These Steps

The number of data breaches was already on a record pace for 2017 before the reported theft of nearly 145 million Americans’ names, addresses and Social Security numbers brought the issue to the forefront.

Every day, data thefts large and small put people’s personal and financial information at risk. There are steps that data theft victims may take to protect their financial accounts and their identities once cybercriminals have their names and other sensitive information.

The Internal Revenue Service, state tax agencies and the tax community -- partners in the Security Summit -- are marking “National Tax Security Awareness Week” with a series of reminders to taxpayers and tax professionals. Today, the topic is data breaches.

In the first half of 2017, the number of data breaches increased by 29 percent, to a record 791 incidents, according to Identity Theft Resource Center (ITRC) and CyberScout, which sponsored the report. For the past five years, ITRC has tracked data breaches in five key sectors.

Generally, thieves want to take advantage of the stolen data as quickly as possible. That may mean selling the data on the Dark Web for use by other criminals. It may mean the crook tries to access financial accounts for withdrawals or credit cards for charges. It may also mean a thief quickly files a fraudulent tax return in victims’ names for a refund.

Those Who’re Victims Should Consider These Steps:

• If possible, learn what information was compromised. Was it emails and passwords or more sensitive data such as name and Social Security number?
• Take advantage of any credit monitoring offers made by the company that was breached.
• Place a freeze on credit accounts to prevent access to credit records. There may be a fee for requesting one. This varies by state. At a minimum, place a fraud alert on credit accounts by contacting one of the three major credit bureaus. A fraud alert on credit records is not as secure as a freeze, but a fraud alert is free.
• Reset passwords on online accounts, especially financial, email and social media accounts. Experts recommend at least 10-digit passwords, mixing letters, numbers and special characters. Use different passwords for each account. Use a password manager, if necessary.
• Use two-factor authentication wherever it is offered on financial, email and social media accounts. Two-factor authentication requires entry of a username and password and then a security code, generally sent via text to a mobile phone you’ve pre-registered.

The scale of the credit bureau breach, which was reported this summer, has prompted many questions, especially about how a victim’s taxes may be affected. Because of the work by the Security Summit, more protections are in place to protect taxpayers from tax-related identity theft. Thieves will need more than a name, address, birth data and SSN to file a fraudulent tax return.

Tips for the 2018 Tax Season; Will Filing Early Help?

The IRS reminds taxpayers that they should file their tax return as early as they can, but not before they are sure they have all the proper information and supporting Forms W-2 and 1099. Taxpayers should always file an accurate tax return. Filing before all information is received puts taxpayers at risk of needing to file an amended tax return, paying interest or penalties or even receiving an IRS notice or audit.

The IRS and states have put many new defenses in place to help protect taxpayers from identity theft. The new IRS protections have worked well to protect taxpayers, and some key indicators of identity theft on tax returns have dropped by around two-thirds since 2015.

These protections are especially helpful if criminals only have names, addresses and SSNs – which was the information stolen in recent incidents. However, there are continuing concerns that cybercriminals will try to build on this basic information by trying to obtain more specific financial details from taxpayers and tax professionals to help them file fraudulent tax returns.

In addition, no one yet knows what thieves may do with information from the data breaches. The Summit partners believe cybercriminals will increasingly look to steal more detailed information from taxpayers, tax professionals and businesses to help file a fraudulent tax return. The volume of victims means everyone – the tax agencies, tax professionals and taxpayers – must be vigilant going into the 2018 tax filing season and be alert to any unusual activity.

Here Are a Few Signs of Tax-Related Identity Theft:

• An electronically filed tax return rejects because a return with the taxpayer’s SSN already has been filed;
• Taxpayers receive a letter from the IRS asking them to confirm whether they submitted a tax return being held for review;
• Taxpayers receive a notice from the IRS indicating that they owe additional tax, have a refund offset or have a collection action for a year in which they did not file a tax return;
• Taxpayers receive a notice from the IRS that they received wages from an employer for whom the taxpayer did not work.

Taxpayers should file a Form 14039, Identity Theft Affidavit, only if their return rejects because a return using their SSN already has been filed or if told to do so by the IRS. This form is how taxpayers report that they are an identity-theft victim.

The IRS stops the vast majority of fraudulent returns. Each year, the IRS stops returns it deems suspicious and asks the filer to verify whether they filed the return. The IRS will send a notice asking taxpayers to confirm whether they filed the return.

The IRS, state tax agencies and the tax industry are working together to fight against tax-related identity theft and to protect taxpayers. Everyone can help. Visit the “Taxes. Security. Together.” awareness campaign or review IRS Publication 4524, Security Awareness for Taxpayers, to learn more.

National Tax Security Awareness Week No. 2: Don’t Take the Bait; Avoid Phishing Emails by Data Thieves

With the approach of the holidays and the 2018 filing season, the IRS, state tax agencies and the nation’s tax industry urge people to be on the lookout for new, sophisticated email phishing scams that could endanger their personal information and next year’s tax refund.

The most common way for cybercriminals to steal bank account information, passwords, credit cards or Social Security numbers is to simply ask for them. Every day, people fall victim to phishing scams that cost them their time and their money.

Those emails urgently warning users to update their online financial accounts – they’re fake. That email directing users to download a document from a cloud-storage provider? Fake. Those other emails suggesting the recipients have a $64 tax refund waiting at the IRS or that the IRS needs information about  insurance policies – also fake. So are many new and evolving variations of these schemes.

The Internal Revenue Service, state tax agencies and the tax community -- partners in the Security Summit -- are marking “National Tax Security Awareness Week” with a series of reminders to taxpayers and tax professionals. In part two, the topic is avoiding phishing scams.

Phishing attacks use email or malicious websites to solicit personal, tax or financial information by posing as a trustworthy organization. Often, recipients are fooled into believing the phishing communication is from someone they trust. A scam artist may take advantage of knowledge gained from online research and earlier attempts to masquerade as a legitimate source, including presenting the look and feel of authentic communications, such as using an official logo. These targeted messages can trick even the most cautious person into taking action that may compromise sensitive data.   The scams may contain emails with hyperlinks that take users to a fake site. Other versions contain PDF attachments that may download malware or viruses.

Some phishing emails will appear to come from a business colleague, friend or relative. These emails might be an email account compromise. Criminals may have compromised your friend’s email account and begin using their email contacts to send phishing emails.

Not all phishing attempts are emails – some are phone scams. One of the most common phone scams is the caller pretending to be from the IRS and threatening the taxpayer with a lawsuit or with arrest if payment is not made immediately, usually through a debit card.

Phishing attacks, especially online phishing scams, are popular with criminals because there is no fool-proof technology to defend against them. Users are the main defense. When users see a phishing scam, they should ensure they don’t take the bait.

Here are a few steps to take:

• Be vigilant; be skeptical. Never open a link or attachment from an unknown or suspicious source. Even if the email is from a known source, approach with caution. Cybercrooks are adept at mimicking trusted businesses, friends and family. Thieves may have compromised a friend’s email address or they may be spoofing the address with a slight change in text, such as name@example.com vs narne@example.com. In the latter, merely changing the “m” to an “r” and “n” can trick people.
• Remember, the IRS doesn't initiate spontaneous contact with taxpayers by email to request personal or financial information. This includes text messages and social media channels. The IRS does not call taxpayers with threats of lawsuits or arrests. No legitimate business or organization will ask for sensitive financial information via email. When in doubt, don’t use hyperlinks and go directly to the source’s main web page.
• Use security software to protect against malware and viruses. Some security software can help identity suspicious websites that are used by cybercriminals.
• Use strong passwords to protect online accounts. Each account should have a unique password. Use a password manager if necessary. Criminals count on people using the same password repeatedly, giving crooks access to multiple accounts if they steal a password. Experts recommend a password have a minimum of 10 digits, including letters, numbers and special characters. Longer is better.
• Use multi-factor authentication when offered. Some online financial institutions, email providers and social media sites offer multi-factor protection for customers. Two-factor authentication means that in addition to entering your username and password, you must enter a security code generally sent as a text to your mobile phone. Even if a thief manages to steal usernames and passwords, it’s unlikely the crook would also have a victim’s phone.

The IRS, state tax agencies and the tax industry are working together to fight against tax-related identity theft and to protect taxpayers. Everyone can help. Visit the “Taxes. Security. Together.” awareness campaign or review IRS Publication 4524, Security Awareness for Taxpayers, to learn more.

National Tax Security Awareness Week: Recognize Phishing Email Scams

The IRS reminds people to be on the lookout for new, sophisticated email phishing scams. These scams not only endanger someone’s personal information, but they can also affect a taxpayer’s refund in 2018.

This tip is part of National Tax Security Awareness Week. The IRS is partnering with state tax agencies, the tax industry and groups across the country to remind people about the importance of data protection.

Phishing attacks use email or malicious websites to get personal information from the user. In many cases, the criminal fools someone into believing the phishing email is from someone they trust. The emails often have the look and feel of authentic communications. These targeted messages can trick even the most cautious person into doing something that may compromise data.

People should be vigilant and skeptical. Even if the email is from a known source, people should use caution because cybercrooks are very good at mimicking trusted businesses, friends and family.

Here are six examples of email phishing scams:

• Emails requesting personal information. The thief might ask for bank account numbers, passwords, credit cards and Social Security numbers. This is the most common way thieves steal data.  
• An email urgently warning the recipient to update online financial accounts at a hyperlink provided in the email. The link goes to a fake site.  
• A message with an email address spoofing a familiar address to look like trusted businesses, friends and family. The fake address has a slight change in text, such as name@example.com vs narne@example.com. Merely changing the “m” to an “r” and “n” can trick people.  
• Emails saying the recipient has a tax refund waiting at the IRS or that the IRS needs information about insurance policies. The IRS doesn't initiate spontaneous contact with taxpayers by email to request personal or financial information.  
• The message has hyperlinks that take someone to a fake site. In one example, the email says: “Following recent calculations, we notice that you are eligible to receive a tax refund. In order to start the refund procedure, please visit this link and follow the steps required.” The link goes to a fake site. The IRS doesn’t send emails asking for refund verification.  
• The message includes a PDF attachment that may download malware or viruses. Never open an attachment from a suspicious email address.

More Information:

• Taxes. Security. Together.
• Protect Your Clients; Protect Yourself
• Don’t Take the Bait

National Tax Security Awareness Week No. 1: Online Security - Seven Steps for Safety

During the online holiday shopping season, the IRS, state tax agencies and the tax industry remind people to be vigilant with their personal information. While shopping for gifts, criminals are shopping for credit card numbers, financial account information, Social Security numbers and other sensitive data that could help them file a fraudulent tax return.

Anyone who has an online presence should take a few simple steps that could go a long way to protecting their identity and personal information.

The Internal Revenue Service, state tax agencies and the tax community, partners in the Security Summit, are marking “National Tax Security Awareness Week”, Nov. 27-Dec.1, with a series of reminders to taxpayers and tax professionals. In part one, the topic is online security.

Cybercriminals seek to turn stolen data into quick cash, either by draining financial accounts, charging credit cards, creating new credit accounts or even using stolen identities to file a fraudulent tax return for a refund.

Here are seven steps to help with online safety and protecting tax returns and refunds in 2018:

• Shop at familiar online retailers. Generally, sites using the “s” designation in “https” at the start of the URL are secure. Look for the “lock” icon in the browser’s URL bar. But remember, even bad actors may obtain a security certificate so the “s” may not vouch for the site’s legitimacy.

• Avoid unprotected Wi-Fi. Beware purchases at unfamiliar sites or clicks on links from pop-up ads. Unprotected public Wi-Fi hotspots also may allow thieves to view transactions. Do not engage in online financial transactions if using unprotected public Wi-Fi.

• Learn to recognize and avoid phishing emails that pose as a trusted source such as those from financial institutions or the IRS. These emails may suggest a password is expiring or an account update is needed. The criminal’s goal is to entice users to open a link or attachment. The link may take users to a fake website that will steal usernames and passwords. An attachment may download malware that tracks keystrokes.

• Keep a clean machine. This applies to all devices -- computers, phones and tablets. Use security software to protect against malware that may steal data and viruses that may damage files. Set it to update automatically so that it always has the latest security defenses. Make sure firewalls and browser defenses are always active. Avoid “free” security scans or pop-up advertisements for security software.

• Use passwords that are strong, long and unique. Experts suggest a minimum of 10 characters but longer is better. Avoid using a specific word; longer phrases are better. Use a combination of letters, numbers and special characters. Use a different password for each account. Use a password manager, if necessary.

• Use multi-factor authentication. Some financial institutions, email providers and social media sites allow users to set accounts for multi-factor authentication, meaning users may need a security code, usually sent as a text to a mobile phone, in addition to usernames and passwords. For added protection, some financial institutions also will send email or text alerts when there is a withdrawal or change to the account. Generally, users can check account profiles at these locations to see what added protections may be available.

• Encrypt and password-protect sensitive data. If keeping financial records, tax returns or any personally identifiable information on computers, this data should be encrypted and protected by a strong password. Also, back-up important data to an external source such as an external hard drive. And, when disposing of computers, mobile phones or tablets, make sure to wipe the hard drive of all information before trashing.

There are also a few additional steps people can take a few times a year to make sure they have not become an identity theft victim.

Receive a free credit report from each of the three major credit bureaus once a year. Check it to make sure there are no unfamiliar credit changes. Create a “My Social Security” account online with the Social Security Administration. There users can see how much income is attributed to their SSN. This can help determine if someone else is using the SSN for employment purposes.

The IRS, state tax agencies and the tax industry are committed to working together to fight against tax-related identity theft and to protect taxpayers. But the Security Summit needs help. People can take steps to protect themselves online. Visit the “Taxes. Security. Together.” awareness campaign or review IRS Publication 4524, Security Awareness for Taxpayers, to see what can be done.

IRS and #GivingTuesday

The Internal Revenue Service reminds taxpayers looking to maximize their tax savings before the end of the year to consider charitable giving. Many taxpayers may already be planning to do so for Giving Tuesday on November 28. Giving money or goods to a tax-exempt charity before December 31 can usually be deducted on that year’s federal income tax return.

This #GivingTuesday, IRS has tips to find tax-deductible options:

• Donating to disaster recovery efforts or a local shelter?
• Want to know the special rules to get a tax deduction from donating cars, boats and other property?
• Cash or non-cash year-end gifts to charity? What to know for a tax deduction on your IRS return.
• IRA owners over age 70½ - want to know about a different way to give?
• Hoping for a tax-deduction for your Giving Tuesday donation? Itemize or eFile your return

National Tax Security Awareness Week: Eight Steps to Keep Online Data Safe

During the holiday shopping season, shoppers are looking for the perfect gifts. At the same time, criminals are looking for sensitive data. This data includes credit card numbers, financial accounts and Social Security numbers. Cybercriminals can use this information to file a fraudulent tax return.

This tip is part of National Tax Security Awareness Week. The IRS is partnering with state tax agencies, the tax industry and groups across the country to remind people about the importance of data protection.

Anyone with an online presence can do a few simple things to protect their identity and personal information. Following these eight steps can also help taxpayers protect their tax return and refund in 2018:

• Shop at familiar online retailers. Generally, sites with an “s” in “https” at the start of the URL are secure. Users can also look for the “lock” icon in your browser’s URL bar. That said, some criminals may get a security certificate, so the “s” may not always mean a site is legitimate.  
• Avoid unprotected Wi-Fi. Users should not do online financial transactions when using unprotected public Wi-Fi. Unprotected public Wi-Fi hotspots may allow thieves to view transactions.
• Learn to recognize and avoid phishing emails that pose as a trusted source. These emails can come from a source that looks like a legitimate bank or even the IRS. These emails may include a link that takes the user to a fake website. From there, the thieves can steal usernames and passwords.
• Keep a clean machine. This includes computers, phones and tablets. Users should install security software to protect against malware that may steal data. This software also protects against viruses that may damage files.
• Use passwords that are strong, long and unique. Experts suggest a minimum of 10 characters. Use a combination of letters, numbers and special characters. Use a different password for each account.
• Use multi-factor authentication when available. Some financial institutions, email providers and social media sites allow users to set their accounts for multi-factor authentication. This means users may need a security code, usually sent as a text to their mobile phone, in addition to a username and password.
• Sign up for account alerts. Some financial institutions will send email or text alerts to an account holder when there is a withdrawal or change to their accounts. Generally, people can check their account profile to see what added protections may be available.
• Encrypt sensitive data and protect it with a password. People who keep financial records, tax returns or any personal information on their computer should protect this data. Users should also back up important data to an external source. When disposing of a computer, mobile phone or tablet, people should make sure they wipe the hard drive of all information before trashing.

More Information:

• Taxes. Security. Together
• Protect Your Clients; Protect Yourself
• Don’t Take the Bait

Taxpayers can use IRS Select Check tool before Donating on Giving Tuesday

Giving Tuesday is an annual event celebrated the week after Thanksgiving to kick off the season of charitable giving. Taxpayers making donations may be able to deduct them on their tax return. As people are deciding where to make their donations, the IRS has a tool that may help.

Exempt Organizations Select Check on IRS.gov is a tool that allows users to search for charities. It provides information about an organization’s federal tax status and filings.

Here are four facts about EO Select Check:

• Donors can use it to confirm an organization is tax exempt and eligible to receive tax-deductible charitable contributions.  
• Users can find out if an organization had its tax-exempt status revoked. A common reason for this is that the organization did not file its Form 990 or notices annually as required.  
• EO Select Check does not list certain organizations that may be eligible to receive tax-deductible donations. This includes churches, organizations in a group ruling, and governmental entities.  
• An organization’s “doing business as” name is not searchable. Search using an organization’s legal name instead.

Taxpayers can also use the Interactive Tax Assistant, Can I Deduct my Charitable Contributions? to help determine if a charitable contribution is deductible.

More Information

• Exempt Organizations Select Check – Search Tips
• Exempt Organizations Select Check Frequently Asked Questions

IRS Offers Small Businesses a One-Stop Resource Center for Help Preparing, Filing and Paying Taxes

Small businesses across the country are preparing for their special day -- Small Business Saturday – taking place on Nov. 25. The Internal Revenue Service wants new small business owners, including those involved in the sharing economy, to know that IRS.gov has an online resource center to help them learn all they need to know about the tax implications of running a small business. The Small Business and Self-Employed Tax Center offers a variety of useful tools that small business owners can access to prepare, file and pay taxes.

The Center is a virtual one-stop tax shop with an A to Z index that gives answers for most business-related tax questions. It includes the Virtual Workshop, an educational video series that walks small business owners step-by-step through the basics. New owners can learn the ins and outs of their taxes at their own pace with other educational tools and products linked from the page. One of the Center’s newest features is the Sharing Economy Tax Center for those who use various online platforms to rent rooms, provide rides and offer other goods and services. Those involved in the Sharing Economy may visit the Pay as You Go, So You Don’t Owe page to learn more about ways to avoid paying the Estimated Tax Penalty.

Getting an Employer Identification Number (EIN) is often the first step for new small businesses, and the Center’s page makes it easy. There are links to the downloadable tax calendar and a variety of videos. Figuring out what is the best form of business entity to establish is easier with the selecting a business structure section. It explains the tax implications of  setting up a Sole Proprietorship, Partnership, Corporation, S Corporation or a Limited Liability Company (LLC).

The Center features relevant tax forms and instructions for small businesses. It serves as a resource on how to handle employment taxes, if employees are part of a business, or figuring out self-employment taxes for the sole proprietor. The section on filing and paying business taxes details which IRS forms to use for what sort of business entity and when to file.

The resources on Small Business and Self-Employed Tax Center are not just for new small businesses but can be used for every stage of a small business lifecycle; from starting up and operating a business to selling or closing one. In addition, the page has information on topics like recordkeeping, types of retirement plans and the Affordable Care Act.

Additional IRS Resources:

• Checklist for Starting a Business
• Small Business Publications
• Reporting Payments to Independent Contractors
• Estimated Taxes
• Electronic Filing Options for Business and Self-Employed Taxpayers
• Tax Help in Spanish and Other Languages

Five Things to Remember about Hobby Income and Expenses

From scrapbooking to glass blowing, many Americans enjoy hobbies that are also a source of income. A taxpayer must report income on their tax return even if it is made from a hobby.

However, the rules for how to report the income and expenses depend on whether the activity is a hobby or a business. There are special rules and limits for deductions taxpayers can claim for hobbies. Here are five things to consider:

• Determine if the activity is a business or a hobby. If someone has a business, they operate the business to make a profit. In contrast, people engage in a hobby for sport or recreation, not to make a profit. Taxpayers should consider nine factors when determining whether their activity is a business or a hobby, and base their determination on all the facts and circumstances of their activity. For more about ‘not-for-profit’ rules, see Publication 535, Business Expenses.  
• Allowable hobby deductions. Taxpayers can usually deduct ordinary and necessary hobby expenses within certain limits:
• Ordinary expense is common and accepted for the activity.
• Necessary expense is appropriate for the activity.  
• Limits on hobby expenses.  Taxpayers can generally only deduct hobby expenses up to the amount of hobby income. If hobby expenses are more than its income, taxpayers have a loss from the activity. However, a hobby loss can’t be deducted from other income.  
• How to deduct hobby expenses.  Taxpayers must itemize deductions on their tax return to deduct hobby expenses. Expenses may fall into three types of deductions, and special rules apply to each type. See Publication 535 for the rules about how to claim them on Schedule A, Itemized Deductions.
• Use IRS Free File.  Hobby rules can be complex, and IRS Free File can make filing a tax return easier.

Additional IRS Resources:

• Publication 525, Taxable and Nontaxable Income
• Publication 529, Miscellaneous Deductions
• Publication 334, Tax Guide for Small Business
• Publication 17, Your Federal Income Tax

Get Ready for Taxes: Donations May Cut Tax Bills

The Internal Revenue Service reminds taxpayers looking to maximize their tax savings before the end of the year to consider charitable giving. Many taxpayers may already be planning on doing so for #GivingTuesday on Nov. 28. Giving money or goods to a tax-exempt charity before Dec. 31 can usually be deducted on that year’s federal income tax return. Taxpayers are urged to consider the following before donating:

Only Donations to Eligible Organizations are Tax-Deductible.

The IRS Select Check tool on IRS.gov is a searchable online database that lists most eligible charitable organizations. Churches, synagogues, temples, mosques and government agencies are eligible to receive deductible donations, even if they are not listed in this database.

Itemize to Claim Charitable Donations

Charitable deductions are not available to individuals who choose the standard deduction. Only taxpayers who itemize using Form 1040 Schedule A can claim deductions for charitable contributions. Tax preparation software usually alerts taxpayers to the tax savings options available if itemized deductions exceed the standard deduction. The IRS.gov website can help you answer the question, “Should I itemize?”

Get Proof of Monetary Donations

A bank record or a written statement from the charity is needed to prove the amount and date of any donation of money. Money donations can include various forms apart from cash such as check, electronic funds transfer, credit card and payroll deduction. Taxpayers using payroll deductions should retain a pay stub, a Form W-2 wage statement or other proof showing the total amount withheld for charity, along with the pledge card showing the name of the charity.

Donating Property

For donations of clothing and other household items the deduction amount is normally limited to the item’s fair market value. Clothing and household items must be in good or better condition to be tax-deductible. A clothing or household item for which a taxpayer claims a deduction of over $500 does not have to meet this standard if the taxpayer includes a qualified appraisal of the item with their tax return.

Donors must get a written acknowledgement from the charity for all gifts worth $250 or more. It must include, among other things, a description of the items contributed. Special rules apply to cars, boats and other types of property donations. The IRS.gov website has information to help you determine the value of donated property.

Note Any Benefit in Return

Donors who get something in return for their donation may have to reduce their deduction. Benefits can include merchandise, meals, tickets to an event or other goods and services. A donation acknowledgment must state whether the organization provided any goods or services in exchange for the gift along with a description and estimated value of those goods or services.

Older IRA Owners Have a Different Way to Give

IRA owners age 70½ or older can transfer up to $100,000 per year to an eligible charity tax-free. The transfer can count as their required minimum distribution for the year. Funds must be transferred directly by the IRA trustee to the eligible charity. For details, see Publication 590-B.

Good Records

The type of records a taxpayer needs to keep depends on the amount and type of the donation. An additional reporting form is required for many property donations and an appraisal is often required for larger donations of property. Visit IRS.gov for more information.

Additional IRS Resources:

• Tax Information for Contributors
• Publication 526, Charitable Contributions
• Can I Deduct My Charitable Contributions?