Preparing for Tax Season Starts with Cybersecurity

Simple steps individuals and businesses can take now to help protect sensitive tax and financial data

October is Cybersecurity Awareness Month, making it a good time for individuals and businesses to review how they protect sensitive, personal, financial, and tax information. With another tax season approaching, taking a few preventative steps now can help reduce the risk of identity theft, phishing, and other cyber threats.

The IRS recently reminded taxpayers and tax professionals that cybercriminals continue to look for ways to steal taxpayer information and exploit trusted relationships. Scammers may impersonate the IRS, tax professionals, financial institutions, vendors, or other familiar organizations to obtain sensitive information.

Strengthen everyday cybersecurity habits

The IRS and Cyber Security and Infrastructure Agency (CISA) encourage several basic practices to help strengthen online security.

• Use strong and unique passwords. Avoid reusing passwords across important accounts and consider utilizing a password manager. CISA recommends passwords of at least 16 characters.
• Enable multifactor authentication (MFA). Adding another method of verification can provide an additional layer of protection if a password becomes compromised.
• Keep software and devices updated. Install security updates for computers, mobile devices, applications, browsers, and security software.
• Learn to recognize suspicious communications. Be cautious of unexpected emails, texts, phone calls, or other messages requesting personal or financial information or creating a sense of urgency. Verify suspicious requests using a known contact method rather than replying directly or using contact information provided in the message.
• Protect sensitive records. Securely store tax and financial documents, encrypt sensitive files when appropriate, and maintain backups of any important information.
• Use secure networks. Avoid accessing tax records, financial accounts, or other sensitive information over public Wi-Fi.

Prepare your tax information before filing season

Tax-related identity theft can occur when someone uses stolen personal or business information to file fraudulent returns, access tax accounts, or commit other financial crimes.

Before the 2026-27 tax season gets underway, taxpayers can take additional steps to protect themselves. Individuals may want to consider obtaining an IRS Identity Protection Pin (IP PIN), a six-digit number that helps prevent someone else from filing a federal tax return using their Social Security number or Individual Taxpayer Identification Number.

Businesses and individuals can leverage IRS online accounts for secure document sharing, payment processing, and communication with the IRS. Setting up an account should take less than 15 minutes. These accounts are also extremely useful for notice resolution in the future.

Businesses should also remain alert for phishing attempts, fraudulent invoices, payroll schemes, and requests to change employee or payment information. Sensitive requests should be independently verified using a trusted method of communication.

Know how the IRS communicates

Recognizing legitimate IRS communications can also help taxpayers avoid scams. The IRS generally initiates contact with taxpayers through the U.S. mail, and only send email or texts when the taxpayer opts in. Unexpected emails, text messages, or social media messages claiming to be from the IRS should be treated with caution.

Taxpayers should avoid clicking links or opening attachments in suspicious communications and should verify requests before providing personal, financial, or tax information.

Stay cyber aware

Cybersecurity is important year-round, but reviewing these practices before tax season can help individuals and businesses better protect their information when sensitive financial documents are being collected and shared.

If you have questions about protecting sensitive information or preparing for the upcoming tax season, contact your Keiter Opportunity Advisor. Concerns about your mitigating cyber threats for your business? Our Cybersecurity team delivers right-sized solutions that protect your systems and data while supporting your business goals. Email | Call 804.747.0000

Sources: 

IRS Cybersecurity Awareness Month
Four Essentials to Protect Your Business or Government Organization
CISA: Level Up Your Defenses
CISA Launches Cybersecurity Awareness Month: Securing the Next 250

IRS Dirty Dozen: Tax Scams to Watch for in 2026