Slashdot Mirror
Sign Up At irs.gov Before Crooks Do It For You
tsu doh nimh writes If you're an American and haven't yet created an account at irs.gov, you may want to take care of that before tax fraudsters create an account in your name and steal your personal and tax data in the process. Brian Krebs shows how easy it is for scammers to register an account in your name and view your current and past W2s and tax filings with the IRS, and tells the story of a New York man who — after receiving notice from the agency that someone had filed a phony return in his name — tried to get a copy of his transcript and found someone had already registered his SSN to an email address that wasn't his. Apparently, having a credit freeze prevents thieves from doing this, because the IRS relies on easily-guessed knowledge-based authentication questions from Equifax.
Or we could have just gone to the doctor and paid out of pocket, without having to pay a middle layer to deny the claim.
For years, CRA, the Canadian equivalent to the IRS, has been including Web Authentication Codes (WACs) with the annual notice of assessment, that is, their summary of your personal income tax submission, snail mailed to your address of record some weeks after you submit your personal tax return.
Your WAC changes every year. Without it, you cannot access your account in CRA's online systems.
And it isn't enough: You also need your SIN and the amount recorded on a particular line of your return (or notice, I cannot remember which).
Now here is where my memory gets hazy: Once you register for online access, I think they might send a one-time code to your address, which is required to activate your account.
The only way to subvert this system is to tamper with postal delivery, which means fraudsters must take specific, intentional action and break multiple federal laws (postal acts, the income tax act, etc.). There ain't no easy to guess stuff in the Canadian system. The bar is sufficiently high, the risks to fraudsters very high, i.e., hard time.
I'm here EdgeKeep Inc.
I just went to www.irs.gov
The advice to sign up there may be reasonable, but the words 'sign up' or anything semantically similar do not appear on the front page. It's not obvious where you would go to try to sign up.
It's not https either.
I should use this sig to advertise my book ISBN-13 : 978-1501515132.
I was signing up for something through my bank, and it was asking me some of these questions like, "Which of these employers did you previously work for?" Unfortunately none of them were correct (this wasn't a huge surprise because I had already tried to correct my credit report information... they seem to have me confused with someone else). That meant I couldn't continue, but it turns out if you start the test over again, it gives you the same question but randomly selects the "wrong" answers. All I had to do was remember what the original multiple-choice answers were, and pick the one that didn't change. Basically that means there's almost zero security with this method of authentication.
"I have never let my schooling interfere with my education." - Mark Twain
On the contrary, irresponsible tax cuts without commensurate decreases in spending have resulted in the largest debt in the history of mankind.
We could talk about the "coincidence" that said tax cuts disproportionally favored the wealthy (i.e., they made the tax less progressive), and that spending actually increased and most of that increase was for war.... but you don't really want to admit that, do you?
It's such an inconvenient fact that deficits tend to drop due to the policies of liberals and rise due to the policies of [neo-]conservatives, when [neo-]conservatives desperately try to lie and claim it's the other way around...
"[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz
From the article:
My identity was stolen once. Someone got my name, DOB, SSN, and mailing address. They used this to open a credit card (*cough*Capital One*cough*) in my name. Due to a quirk, I was lucky and the card came to me, not them. Once I reported it as fraudulent (after having to argue that, no, my wife who was standing RIGHT THERE didn't open it under my name without telling me), they refused to tell me where the card was supposed to have gone to. They told me that this was because if they told me and I went and shot the person, they would be liable. Then, they proceeded to stonewall both me and the police until the investigation was dropped.
The lesson here? Companies (and government agencies) don't care about you. Fraud can be written off and is no big deal to them even if it ruins your credit rating and takes years of your life to fix. For them, that's just one line item in a million. I was lucky that I didn't lose anything and it was relatively easy to fix (close fraudulent account, freeze credit file), but others aren't so lucky.
My sci-fi novel, Ghost Thief, is now available from Amazon.com.
> BTW, the deficit reductions under Clinton were the direct result of the policies of Reagan and Gingrich.
Bullshit. The Clinton surplus was created by the Omnibus Budget Reconciliation Act of 1993, which every single Republican in congress voted against.
To make laws that man cannot, and will not obey, serves to bring all law into contempt.
--E.C. Stanton