Beware of Tax Information Phishing

Enterprise Security staff at Ohio State are seeing an increase in the volume of phishing emails offering users attachments, links or instructions for downloading their W-2 forms. These are fraudulent emails designed to steal your identity and Social Security number.

Tips for spotting a scam:

  1. Verify the sender’s address.
  2. Verify your email address is in the “to” field.
  3. Poor spelling and grammar are red flags.
  4. The message should never ask you for personal information. You don’t have to provide your Social Security number to get your W-2.
  5. Be wary of clicking on links!  Hover over links to check that the address matches where the link is intended to go or simply type the address of the website you want to visit in your browser yourself.    

Your authentic Ohio State W-2 form will be sent from Tax Form Management <noreply@TaxFormManagement.com>. The subject line will be: IMPORTANT TAX RETURN DOCUMENT AVAILABLE starting on Friday, January 15.

If you receive a suspicious email, please report it by sending it to report-phish@osu.edu.  If you have questions about your W-2, please follow up with the Payroll Department at 614-292-2311 Monday through Friday 8 a.m. - 5 p.m.

For more information about phishing attacks, please visit:
https://ocio.osu.edu/itsecurity/buckeyesecure/phishing

For more information about protecting your identity this tax season, please visit:
https://go.osu.edu/irs-tax-tips.

Please also share this information with your Ohio State colleagues.