The Internal Revenue Service and its Security Summit partners is recommending tax professionals who work remotely should utilize a Virtual Private Network. That recommendation came this week as the IRS reported an upswing in data theft from criminals trying to take advantage of COVID-19 and Economic Impact Payments.The IRS noted a “VPN provides a secure, encrypted tunnel to transmit data between a remote user via the internet and the company network.” It said cybercriminals can use phishing emails or unsecured networks to control a tax professionals computer and file tax returns but change bank account information for refunds.
It also worked against using “pop-ups” on websites for VPN or any kind of security software.
In addition, the IRS noted most tax software providers are offering multi-factor authentication. This means a returning user to the software product must enter their username password, along with a security code, generally sent as a text to a mobile phone.
Te IRS and the Security Summit partners urge tax practitioners to review the security measures outlined in Publication 4557, Safeguarding Taxpayer Data (PDF).
