Jump to content


News(FYI): Criminals are putting old tax returns up for sale on the dark web

Recommended Posts

From CBSNews https://www.cbsnews.com/news/tax-return-criminals-are-putting-old-tax-returns-up-for-sale-on-the-dark-web/

Most people trust their accountant. But security breaches at accounting firms and legal firms are contributing to the plethora of tax information available at rock-bottom prices online, according to a cybersecurity executive. 

These documents — which include prior years' tax returns and forged W-2s — can now be had for rock-bottom prices, according to a report from Carbon Black, a cybersecurity firm. The report pulled up 10 listings of name-date of birth-Social Security number combinations, which ranged in price from 19 cents to $62. Prior-year tax forms, on sale by three different vendors, cost from $1.04 to $52. (People with higher incomes, and whose identity hasn't yet been stolen, command higher prices.)

Old tax returns have many uses. The information on them can be used to file fraudulent tax returns for future years, netting a quick cash take for a criminal. But tax documents can also be used for longer-term schemes. One dark web vendor advertised forged W-2 forms and noted their possible use in setting up a P.O. box or to show proof of employment, as might be required for a loan or a lease. 

"This item pairs very well with many of my other forgery items such [as] forged IDs and especially by forged Social Security cards," the listing advertised. 

"These people are not trying to pickpocket you. They're trying to steal your financial future," said Tom Kellermann, chief cybersecurity officer at Carbon Black. "For a little as 19 cents for your ID and a dollar for last year's tax return, I can own you indefinitely until you have to go through the nightmare process of getting your Social Security number changed." 

Other items on the dark web include bank account credentials, including access to U.S. or European bank accounts that carry a balance. Some of these accounts had balances up to $2,800 that a criminal could withdraw—but it's the account access that's the real draw, Kellermann said. A U.S. bank account gives criminals credentials to start other fake accounts as well as a place to launder ill-gotten gains. If money were deposited into an account overnight and taken out early in the morning, the account's owner could remain unaware of any balance changes.

Because these actions happen on the dark web — a part of the internet where activity is encrypted and nearly impossible to monitor — it's difficult to prosecute these criminals. And the proliferation of online-only services makes it easier for criminals to set up a financial presence without ever exposing their face, the report noted.”

  • Like 1
Link to post
Share on other sites

From the article Arcadia linked (thanks, Arcadia!):

"To protect themselves, Kellermann said consumers should keep antivirus software on all their devices (mobile phones, tablets, computers and laptops), and should change their passwords (or, preferably, passphrases) every several months. And everyone who isn't about to move or buy a car should freeze their credit, he added. A credit freeze would prevent most unauthorized activity and is a straightforward process. 

"All you have to do is call a credit bureau and put in your Social Security number over the phone," he said. "And I would recommend doing it over the phone."


Here's more from the May 2019 issue of Kiplinger's. The article is about ID theft of all sorts. It is so good, you might want to buy the issue or print it out. For more about freezing credit, scroll down to where it says "The power of putting your credit on ice."



Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...