Technologies

Tax Scams Are Preying on Last-Minute Filers

If you still haven’t filed your taxes, think before you click.

There’s less than a month to go before this year’s income tax filing deadline, and security experts are warning consumers to be on the lookout for tax-related scams and other attempts to steal their refunds and personal information.

Just a heads up that like last year, this year’s federal income tax deadline is April 18 — three days later than usual — thanks to a weekend and Emancipation Day, which is observed in Washington, DC. But the more you procrastinate, the more likely you are to fall victim to some kind of tax-related cybercrime.

Scammers can capitalize on your last-minute efforts to play catch-up if you don’t take a beat before clicking on a dubious link or handing over personal information. Either action could put you at risk for financial fraud or identity theft.

Tax-season scammers often impersonate the IRS, tax professionals or online filing websites, said David Putnam, head of identity and protection for LifeLock, a provider of consumer identity theft protections.

Phishing emails, texts and even phone calls designed to look like they’re from the IRS, or an IRS agent, are a common sight this time of year. They might threaten jail time or big fines if the targeted person doesn’t pay what the cybercriminals might claim are back or overdue taxes.

Those are all sure signs of a scam, Putnam said.

«The IRS only communicates through snail mail, so if you get a text message claiming to be from the IRS, you’ll know you’re actually being contacted by a scammer,» he said.

The IRS also doesn’t take payments in the forms of cryptocurrency or gift cards, making requests for back taxes in those forms obvious signs of a scam too.

Phishing emails could also carry fake tax forms that look like they’re coming from an employer or a bank, said Ravi Srinivasan, CEO of Votiro, a cybersecurity company that specializes in the secure transfer of data.

Srinivasan said consumers are used to getting lots of these files from lots of different places. They’re not necessarily going to think twice before opening up an attachment that could contain malware instead of a tax form.

«Do they know that it’s clean? Do they know that it’s safe?» he asked. «They don’t. They just hope that it is and the bad actors know that.»

When consumers do file, it’s critical that they make sure they’re using a legitimate tax preparation service, since tax returns are chock full of people’s most sensitive personal information, including their Social Security numbers.

Unsolicited offers to file your taxes for you should be regarded with skepticism, Putnam said. They could be part of a «ghost preparation scam,» where a cybercriminal impersonates a tax professional and promises a large refund that never appears or steals your refund by routing it to another account.

They also could collect your personal information through a website spoofing of a legitimate tax preparation service, then use it to file a false tax return and claim your refund, he said.

«Remember, if you enter any personal information on a spoofed website, scammers will have access to it,» he said.

Here are a few tips from the IRS and others for staying alert.

File early. OK. The ship may have already sort of sailed on this one, but the earlier you file, the less time cybercriminals have to use your identity to commit fraud.

Watch out for phishing and smishing. The IRS won’t send unsolicited emails or texts. Skip the links and attachments and go straight to the IRS or the applicable state and city websites.

Get a PIN. File this tip under things to remember for next year. Taxpayers who can validate their identities with the IRS can obtain an identity protection PIN, a six-digit code that prevents a cybercriminal from filing a fraudulent tax return with your Social Security number.

Fight back against fraud. If you discover someone has filed a tax return in your name, complete a paper return and include form 14039 (Identity Theft Affidavit), Putnam said. Report the fraud to local law enforcement and the Federal Trade Commission. Monitor your credit reports and account statements and contact the three major credit bureaus to ask for a freeze so that no one can request new credit in your name.

Always use good passwords and 2FA. These are both a must for any account related to your tax returns and documents. Make sure you’re using good antivirus software and that it, along with your operating system, is up to date. While you’re at it, back up your tax information to a removable drive or encrypted cloud storage. Paper copies and drives should be securely stored.

Know who you’re dealing with. If you’re self-filing online, make sure you’re using a reputable service. If you hire someone to do it for you, make sure they’re who they say they are. Be especially careful when submitting documents both online and on paper. Any decent tax professional or service will use a secure portal, not ask you to email them unprotected. Paper documents shouldn’t be left on a desk for anyone to find.

Shred everything. Tax documents that are no longer needed must be properly destroyed. Dumpster diving still happens. Don’t be tempted to toss them in the trash and definitely don’t put them in the recycling.

Technologies

Today’s Wordle Hints, Answer and Help for July 5, #1477

Here are hints and the answer for today’s Wordle for July 5, No. 1,477.

Looking for the most recent Wordle answer? Click here for today’s Wordle hints, as well as our daily answers and hints for The New York Times Mini Crossword, Connections, Connections: Sports Edition and Strands puzzles.

Today’s Wordle puzzle is a pretty tough one. I grew up on a farm, so I know the word, but I didn’t put it together right away, even though the letters are common ones. If you need a new starter word, check out our list of which letters show up the most in English words. If you need hints and the answer, read on.

Today’s Wordle hints

Before we show you today’s Wordle answer, we’ll give you some hints. If you don’t want a spoiler, look away now.

Wordle hint No. 1: Repeats

Today’s Wordle answer has no repeated letters.

Wordle hint No. 2: Vowels

There is are two vowels in today’s Wordle answer.

Wordle hint No. 3: First letter

Today’s Wordle answer begins with the letter B.

Wordle hint No. 4: Down on the farm

Today’s Wordle answer describes a piece of farm equipment.

Wordle hint No. 5: Meaning

Today’s Wordle answer refers to a machine for making paper, hay, or cotton into bales.

TODAY’S WORDLE ANSWER

Today’s Wordle answer is BALER.

Yesterday’s Wordle answer

Yesterday’s Wordle answer, July 4, No. 1476 was CURVE.

Recent Wordle answers

June 30, No. 1472: BLINK

July 1, No. 1473: MOLDY

July 2, No. 1474: INCUR

July 3, No. 1475: POPPY

Technologies

Today’s NYT Strands Hints, Answers and Help for July 5, #489

Here are hints and answers for the NYT Strands puzzle for July 5, No. 489.

Looking for the most recent Strands answer? Click here for our daily Strands hints, as well as our daily answers and hints for The New York Times Mini Crossword, Wordle, Connections and Connections: Sports Edition puzzles.

The theme of today’s NYT Strands puzzle isn’t terribly tough, but at least one of the words is unusual and really, really long to unscramble. If you need hints and answers, read on.

I go into depth about the rules for Strands in this story.

If you’re looking for today’s Wordle, Connections and Mini Crossword answers, you can visit CNET’s NYT puzzle hints page.

Read more: NYT Connections Turns 1: These Are the 5 Toughest Puzzles So Far

Hint for today’s Strands puzzle

Today’s Strands theme is: Every second counts.

If that doesn’t help you, here’s a clue: Does anybody really know what time it is?

Clue words to unlock in-game hints

Your goal is to find hidden words that fit the puzzle’s theme. If you’re stuck, find any words you can. Every time you find three words of four letters or more, Strands will reveal one of the theme words. These are the words I used to get those hints but any words of four or more letters that you find will work:

DIAL, SOLE, MOLE, MOLES, SHAKE, CHEEP, ROLE, HOME, LOCK, MEAT, TAME, TAMES, ROLES, ROON, TRON

Answers for today’s Strands puzzle

These are the answers that tie into the theme. The goal of the puzzle is to find them all, including the spangram, a theme word that reaches from one side of the puzzle to the other. When you have all of them (I originally thought there were always eight but learned that the number can vary), every letter on the board will be used. Here are the nonspangram answers:

CLOCK, WATCH, SUNDIAL, HOURGLASS, CHRONOMETER

Today’s Strands spangram

Today’s Strands spangram is TIMEKEEPERS. To find it, look for the T that’s four letters down on the far left, and wind across.

Technologies

Microsoft Is Eliminating Passwords in August: Here’s What You Need to Do to Prepare

Microsoft Authenticator has already stopped autofilling passwords, but the biggest change comes next month.

In June, Microsoft Authenticator stopped letting users create new passwords. In July, it turned off the autofill password function. And in August, the login app will stop supporting passwords entirely, moving to more secure passkeys, such as a PIN, fingerprint or facial recognition.

Attila Tomaschek, CNET’s software senior writer and digital security expert, says that passkeys are a safer alternative to the risky password habits practiced by 49% of US adults, according to a recent survey by CNET.

«Passwords can be cracked, whereas passkeys need both the public and the locally stored private key to authenticate users, which can help mitigate risks like falling victim to phishing and brute-force or credential-stuffing attacks,» Tomaschek said.

Using the same password for several accounts or adding personal hints can be a convenient way to remember your login. But that puts you at a big risk for scammers, identity theft and fraud. Here’s more on Microsoft’s plan for eliminating passwords and how to make the switch to passkeys before August.

When will Microsoft Authenticator stop supporting passwords?

Microsoft Authenticator houses your passwords and lets you sign into all your Microsoft accounts using a PIN, facial recognition like Windows Hello, or other biometric data like a fingerprint. Authenticator can be used in other ways, such as verifying you’re logging in if you forgot your password, or using two-factor authentication as an extra layer of security for your accounts. In June, the company stopped letting users add passwords to Authenticator, but here’s a timeline of other changes you can expect from Microsoft.

July 2025: You won’t be able to use the autofill password function.
August 2025: You’ll no longer be able to use saved passwords.

If you still want to use passwords instead of passkeys, you can store them in Microsoft Edge. However, CNET experts recommend adopting passkeys during this transition. «Passkeys use public key cryptography to authenticate users, rather than relying on users themselves creating their own (often weak or reused) passwords to access their online accounts,» Tomaschek said.

Why are passkeys a better alternative to passwords?

So what exactly is a passkey? It’s a credential created by the Fast Identity Online Alliance that uses biometric data or a PIN to verify your identity and access your account. Think about using your fingerprint or Face ID to log into your account. That’s generally safer than using a password that is easy to guess or susceptible to a phishing attack.

Passkeys aren’t stored on servers like passwords. Instead, they’re stored only on your personal device. More conveniently, this takes the guesswork out of remembering your passwords and the need for a password manager.

How to set up a passkey in Microsoft Authenticator

Microsoft said in a May 1 blog post that it will automatically detect the best passkey to set up and make that your default sign-in option. «If you have a password and ‘one-time code’ set up on your account, we’ll prompt you to sign in with your one-time code instead of your password. After you’re signed in, you’ll be prompted to enroll a passkey. Then the next time you sign in, you’ll be prompted to sign in with your passkey,» according to the blog post.

To set up a new passkey, open your Authenticator app on your phone. Tap on your account and select «Set up a passkey.» You’ll be prompted to log in with your existing credentials. After you’re logged in, you can set up the passkey.