Security for households and businesses

Recognize Tax, Insurance, and Business Email Scams

Messages about tax balances, insurance renewals, invoices, or refunds can feel urgent. Scammers imitate public agencies, insurers, vendors, and coworkers to collect personal information or redirect payments. Treat an unexpected request as unverified until you confirm it independently.

Verify tax and insurance messages

Do not use a link or phone number in an unexpected message to sign in, pay, or provide identity information. Visit the organization’s official website by typing its known address yourself, or use a contact method from a prior statement or policy document. Government agencies and insurers can explain the status of a notice through their official channels.

Keep a copy of any notice and compare its details with records you already have. If a message threatens immediate arrest, policy cancellation, or a guaranteed refund unless you pay through an unusual method, stop and verify through a trusted channel.

Protect business payment instructions

Business email compromise often involves a convincing message that asks staff to change vendor banking details, pay a new invoice, or keep a transaction confidential. A familiar display name or email thread can be impersonated or compromised.

• Verify new or changed payment instructions by calling a known number already on file, not a number in the email.
• Require a second authorized person to review changes to payees and payment details.
• Use separate roles for preparing and approving payments where practical.
• Train staff to report suspicious messages and document how verification is performed.
• Contact your financial institution promptly if a payment may have gone to the wrong recipient.

If information or money has been sent

Contact the affected organization and your financial institution as soon as possible using trusted contact details. Preserve the original email, headers if available, invoices, and transaction records. Change any exposed credentials from a safe device, and follow professional or law-enforcement guidance for the situation.

The FTC cybersecurity resources for small businesses include guidance on business email imposters. For tax records and official notices, use the IRS online account or IRS.gov directly. Noven CreditUnion customers should use the secure portal or the Noven CreditUnion contact page for account-specific support.