How to Avoid Online Tax Day Scams: Tips to protect your finances and data

This advisory highlights the surge in tax-season cyber scams and outlines key attacker tactics—phishing/social engineering, business email compromise, drive-by compromises, fake security software, credential dumping, and masquerading—along with practical mitigations such as MFA, anti-phishing training, secure remote access, software patching, and verification procedures for payment and identity. It emphasizes vigilance against unsolicited IRS-like communications, the importance of reputable tools and updated systems, and ongoing user education to reduce risk.