scam

Article Dean Dorton

There seems to never be an end to the stream of new cyber threats being thrown at us and our user base. Most people are starting to be more aware of phishing scams, but are your users up to speed on “smishing”? Smishing is a term used in reference cyber scams delivered through SMS (text) messaging to smartphones. Please share the following with your corporate users:Bad guys are increasingly targeting you through your smartphone. They send texts that trick you into doing something against your own best interests. At the moment, there is a mystery shopping scam going on, starting out with a text invitation, asking you to send an email for more info which then gets you roped into the scam.

Always, when you get a text, remember to “Think Before You Tap”, because more and more, texts are being used for identity theft, bank account take-overs and to pressure you into giving out personal or company confidential information.User awareness is one of the most important parts to a company’s cybersecurity defense plan. Contact your Dean Dorton team to learn more about our tools and services to enhance your user awareness strategy and cybersecurity defense tools.

Article Dean Dorton

It’s no secret that scammers are continuously looking for new ways to reinvent common scams, especially when it comes to phishing emails. Phishing emails are meant to look real, but trick you into clicking a link, providing personal information, or downloading viruses or malware.

Recently the Better Business Bureau learned of a new version of this scam which is circulating quickly. While anyone may receive this email, scammers are specifically targeting small businesses.

According to the Better Business Bureau, here is how the scam works:

You receive an email with the subject line “QuickBooks Support: Change Request.” The message is “confirming” that you changed your business name with Intuit, QuickBook’s manufacturer. However, you never made such a request. It must be a mistake, but fortunately the email contains a link to cancel.

Hand click no [Converted]Pause before you click! Scammers know that you didn’t make this request, and the link to cancel is simply bait. It downloads malware to your device, which scammers use to capture passwords or hunt for sensitive information on your machine. This can open you up to identity theft.

How to Spot a Phishing Scam:

Always be wary of expected emails that contains links of attachments. Here are some other ways to spot phishing messages:

  • Check the reply email address. One easy way to spot an email scam is to look at the reply email. The address should be on a company domain, such as jsmith@company.com.
  • Check the destination of links. Hover over links to see where they lead. Be sure the link points to the correct domain (www.companyname.com) not a variation, such as companyname.othersite.com or almostcompanyname.com. Scammers can get creative, so look closely.
  • Consider how the organization normally contacts you. If an organization normally reaches you by mail, be suspicious if you suddenly start receiving emails or text messages without ever opting in to the new communications.
  • Be cautious of generic emails. Scammers try to cast a wide net by including little or no specific information in their fake emails. Be especially wary of messages you have not subscribed to or companies you have never done business with in the past.
  • Don’t believe what you see. Just because an email looks real, doesn’t mean it is. Scammers can fake anything from a company logo to the “Sent” email address.

Source: Better Business Bureau

When in doubt, if you have a questionable email, it is best to call the source of that email (person or company) to verify that they sent you something you need to open.

If you have concerns regarding your accounting systems or cybersecurity, please contact your Dean Dorton advisor.

Article Dean Dorton

If you’re like many Americans, you may not start thinking about filing your tax return until the April 15 deadline (this year, April 18) is just a few weeks — or perhaps even just a few days — away. But there’s another date you should keep in mind: January 19. That’s the date the IRS began accepting 2015 returns, and filing as close to that date as possible could protect you from tax identity theft.

How filing early helps

In this increasingly common scam, thieves use victims’ personal information to file fraudulent tax returns electronically and claim bogus refunds. When the real taxpayers file, they’re notified that they’re attempting to file duplicate returns.

Tax identity theft can cause major headaches to straighten out and significantly delay legitimate refunds. But if you file first, it will be the thief who is filing the duplicate return, not you.

Another key date

Of course you need to have your W-2s and 1099s to file. So another key date to be aware of is February 1 — the deadline for employers to issue 2015 W-2s to employees and, generally, for businesses to issue 1099s to recipients of any 2015 interest, dividend or reportable miscellaneous income payments.

An added bonus

Let us know if you have questions about tax identity theft or would like help filing your 2015 return early. An added bonus of filing early, if you’ll be getting a refund, is enjoying that refund sooner.

Article Dean Dorton

Are you in tune with the fraud risks of your business? On October 23, Dean Dorton’s Nick Lynch and Simon Keemer, along with Timothy Beam, Supervisory Special Agent with the Federal Bureau of Investigations (FBI), shared recent examples and insights with construction professionals at the 2015 Ohio Valley Construction Conference. The panelists provided a variety of “best-practices” related to the deterrence of fraud within an organization.

According to Beam, the FBI continues to investigate cases of email phishing scams, more commonly known as the “Nigerian Email Scam.” In this scheme, scammers target victims by email, letter, text message or through social media outlets soliciting assistance to transfer money from one bank account to another bank account. In a new twist to these email scams, the email accounts of C-Suite employees or owners of the business are spoofed to create the impression that it is the organization’s executives or owners that are requesting lower level employees to make the bank transfers. If you or your organization receives such an unsolicited request, it is best to ignore the request and delete the communication immediately. In our world, where cyber security threats are continually evolving, it is important to remember to remain vigilant.

Other threats common in the construction industry include the misappropriation of assets through activities such as theft of tools and materials from job sites, bid rigging, kick-back schemes and inappropriate use of company credit cards. Financial fraud is also a risk through the manipulation of estimated costs to complete, misallocation of job costs between jobs, and general manipulation of job performance and profitability.

A common tool to assist in the detection and deterrence of fraud is the use of an ethics hotline. Hotlines are affordable to implement and provide an outlet for employees, vendors and customers to report suspected unethical behavior anonymously, either by phone or online. Certified Fraud Examiner (CFE) Nick Lynch advised that frauds are most often detected through tips – the Association of Certified Fraud Examiners (ACFE) Report to the Nations on Occupational Fraud for 2014 shows that 42% of frauds are initially detected through tips. Other common fraud detection methods include management review (16%) and internal audit (14%).

According to Lynch, “The perception of detection is one of the most effective means to prevent or deter fraud. In the construction industry, you can create the perception of detection by publicizing an ethics hotline within the organization and at construction sites.” It is also important to ensure that management fully supports the use of an ethics hotline within the organization and takes the appropriate steps to maintain confidentiality and independence while verifying the accuracy of information received from tips.

Internal audit is also an effective fraud detection and prevention activity. The panel discussed alternative ways in which internal audit procedures can be implemented within an organization in a low cost high impact manner. The discussion included how to use existing accounting personnel to perform internal audit procedures, or even outsourcing or co-sourcing internal audit with an accounting firm.

Regardless of your industry, no organization is immune to the risk of fraud. However, recognizing and understanding the risks specific to your organization is a necessary first step.

If you would like to speak with someone at Dean Dorton regarding fraud prevention, or suspected fraud, please contact Simon Keemer, Payton Miller, or Hunter Stout.

Article Dean Dorton

How to Avoid IRS Scams

IRS audit

Most of us try to avoid run-ins with the Internal Revenue Service. We file our tax returns, pay our taxes and, generally, keep our noses down and accounts in good order to keep its representatives from knocking on our doors. There are various reasons why the IRS may try to reach to you but, if they do, you should be aware of how they will do it. With increasingly aggressive telephone scams occurring throughout the country, we want you to be aware that imposters may be trying to reach you or your relatives. So, what happens when the (real) IRS contacts you?

If the IRS is initiating contact with you, it will first send you a tax notice through the mail. The IRS does not call about tax debts owed without first having mailed a notice. It will not email, text or Facebook you to establish contact. In addition, it will not threaten you with arrest, request credit or debit card information over the phone or demand payment for outstanding tax liabilities without giving you time to respond.

The IRS has posted articles on its website and videos on YouTube covering this topic.  In case you have not seen some of their most recent content, we are providing a couple links for you that further discuss these issues. If you’ve received a call and are unsure whether it was a legitimate attempt by the (real) Internal Revenue Service to reach you, please let us know and we’d be happy to assist you in making that determination.

If you would like additional information or have questions regarding your individual or business tax needs, please contact Megan Kishman at mkishman@deandortonstg.wpenginepowered.com or 502-566-1070.