As part of Cybersecurity Awareness Month, the Internal Revenue Service (IRS) is encouraging taxpayers to adopt online security habits to help protect personal, financial and tax information from identity thieves and scammers.

“Criminals continue to look for new ways to steal taxpayer information and exploit trusted partnerships,” said IRS Chief Executive Officer Frank J. Bisignano. “Taxpayers and tax professionals can help protect sensitive information and strengthen the security of the tax system by making cybersecurity practices part of their routine year-round.”

The IRS encourages simple steps for increased safety:

• Use Strong Passwords and Multifactor Authentication: The IRS recommends choosing strong, unique passwords for online accounts and using a password manager to store your credentials. Taxpayers should also enable multifactor authentication whenever possible, which provides an additional layer of protection.
• Protect Tax Records and Sensitive Information: Important tax records should be securely stored. It is also recommended that sensitive files be encrypted whenever possible. Maintaining secure backups can also help taxpayers recover information if a device is lost, damaged or compromised.
• Use Secure Internet Connections: Public Wi-Fi networks may expose users to additional security risks. The IRS recommends avoiding public wireless networks when accessing financial accounts, tax records or IRS online services.

Taxpayers can strengthen protection against tax-related identity theft by obtaining an Identity Protection PIN (IP PIN), a six-digit number that helps prevent fraudulent tax return filings. The IRS also offers secure online accounts that allow taxpayers and businesses to access tax information and manage certain tax responsibilities online.

The IRS generally initiates contact through regular mail. The agency does not send messages through social media and does not email or text taxpayers unless they have opted into specific services. Taxpayers should be suspicious of unexpected messages claiming to be from the IRS and avoid clicking links or opening attachments.

Individuals who receive suspicious tax-related communications should visit IRS.gov/SubmitATip to report potential scams, identity theft and other fraud-related activities. Tax professionals who experience a data breach are encouraged to notify the IRS as soon as possible.

By making cybersecurity a year-round habit, taxpayers help reduce the risk of identity theft, protect sensitive financial information and strengthen the security of the overall tax system.