Tips for Account Security When Holiday Shopping

Key Takeaways

• Watch for IRS impersonation scams.
• Use a password manager. Strong, unique passwords for every account are non-negotiable.
• Keep your devices updated. Software updates often patch newly discovered security flaws.
• Use antivirus protection and a firewall.
• Avoid public Wi-Fi without a VPN.

Your inbox is probably filling faster than you can keep up with right now: receipts, shipping confirmations, donation reminders, Black Friday deals. And amid all that digital clutter, cybercriminals are watching too. Every year between Thanksgiving and tax season, scams ramp up.

How can I spot and avoid tax-related scams?

Phishing emails and text messages ("smishing") are more polished than ever, and scammers now use AI and deepfakes to create more convincing emails and voice calls. They may pose as IRS agents, banks, or even your tax preparer.

The most important thing to remember: the IRS will never email, text, or DM you to request personal data or payment. If you get a suspicious message like that, don't click anything in it. Forward it to phishing@irs.gov and delete it.

If you're unsure whether a tax notice is legitimate, log into your online IRS account directly, or contact us to confirm.

Should I use a password manager?

Absolutely. Cyber thieves rely on password reuse. Once one password leaks, they have the key to everything from your email to your bank.

A password manager securely stores unique, randomly generated passwords for every account and fills them in automatically. Look for one that supports passkeys, which use biometrics (like face or touch ID) instead of passwords. Even if you don't use a password manager, use passkeys whenever that option is available.

How can I digitally secure my devices?

Keep your devices updated. Those update pop-ups you ignore are often patching vulnerabilities that hackers exploit. Turn on automatic updates for your operating system, browsers, and apps, install reliable antivirus software, and make sure your firewall is enabled.

Is it safe to use public Wi-Fi?

Public Wi-Fi (airports, coffee shops, hotels) is often unsecured. Hackers can intercept your data or create fake networks that look legitimate. If you need to connect, use a VPN, which encrypts your traffic. Your phone's personal hotspot is also a much safer choice than shared public Wi-Fi. Ideally, wait until you're back on your own password-protected home network before logging into sensitive accounts.

FAQs

"What should I do if I accidentally gave personal information to a scammer?"

Report it to phishing@irs.gov, contact your bank or card issuer, and place a fraud alert on your credit file. You may also need to file IRS Form 14039 (Identity Theft Affidavit).

"How can I safely send tax documents to my preparer?"

Never email tax forms or Social Security numbers as attachments. Use a secure upload portal or encrypted link. Ask our office for the link to your secure client folder.

"Should I freeze my credit?"

Yes, if you rarely apply for new credit. It's one of the most effective (and free) ways to prevent new accounts from being opened in your name.

"How do I know if my information has already been exposed?"

Visit haveibeenpwned.com to check whether your email has appeared in known data breaches. If it has, change that password everywhere you used it and turn on two-factor authentication.

"How common is tax identity theft?"

It's increasing. The IRS flagged 2.8 million returns for potential identity fraud in 2024, up from 2.1 million in 2023. Prevention is always easier than cleanup.

You don't need to be a cybersecurity expert to protect yourself. A few proactive habits go a long way, and for tax season specifically, use secure document sharing and enroll in the IRS IP PIN program.