Tax filing season is upon us — an important time of year for individuals and organizations, and unfortunately also for cybercriminals who exploit this period. These attackers take advantage of the season to carry out targeted campaigns against people filing taxes or handling tax-related matters, making them prime targets for theft of sensitive information.
Increased phishing attacks during tax season
Phishing attempts rise considerably during tax season, creating significant challenges for both private individuals and businesses. Because cybercriminals specifically target vulnerable users at this time, it’s important to stay informed about current trends and the techniques attackers are using. Being aware of these dangers helps reduce the risk of falling victim to fraudulent schemes.
Fake government domains and international examples
Since February, researchers at Check Point Research (CPR) have tracked a dozen registered domains related to the UK tax authority (HMRC), and as many as 46 percent of those domains are classified as malicious or suspicious. Cybercriminals often register deceptive URLs that closely mimic legitimate government domain names. Similar phishing campaigns have been detected in the United States, where attackers impersonate the IRS to steal user information. The Swedish Tax Agency (Skatteverket) also reported in March that it experienced distributed denial-of-service (DDoS) attacks on the first day digital filing became available.
Security expert advice for tax season
“You need to be vigilant during tax season,” says Mats Ekdahl, security expert at Check Point Software. Cybercriminals are constantly looking for opportunities to exploit vulnerabilities and trick people. However, with good habits and appropriate cybersecurity tools — such as email protection, web filtering, and AI-driven solutions — you can reduce the risk and better protect yourself against these threats.
How to protect yourself from cyber threats
To protect your personal information, consider adopting these proactive measures:
- Always double-check URLs before you click
- Be cautious with emails that request personal or financial information
- Use strong passwords and change them regularly
- Enable multi-factor authentication whenever possible
Further reading on Check Point’s blog: https://blog.checkpoint.com/research/tax-season-scams-how-to-protect-yourself-from-cyber-security-threats/