The IRS has indicated that there has been a substantial increase in a phishing email scheme. The scheme involves direct deposit payroll and wire transfers. There may be and probably is more than two versions of this scam, but the IRS has reported the following two versions.
An email impersonating a company employee is sent to either payroll or human resource personnel. The payroll or human resource department is asked to change the employee’s direct deposit for payroll purposes. The scammer provides a new bank account and routing number which is controlled by the scammer.
Another version of the scheme involves emails impersonating a company executive which is sent to the person responsible for wire transfers. The email requests that a wire transfer be made to a specific account controlled by the scammer.