February Isn’t Just About Forms. It’s When the Scammers Start.
Tax season is ramping up. Your bookkeeper’s pulling rent roll reports, your regional managers are prepping owner packets, and HR is chasing down contractor 1099s. But while everyone’s focused on forms, scammers are focused on your staff.
And there’s one scam that hits Salt Lake City property management companies first every year—because it's easy to pull off, highly believable, and aimed squarely at the people managing payroll and HR.
It’s called the W-2 scam.And it could already be sitting in someone’s inbox.
The W-2 Scam: A Perfect Storm for Property Firms
Here’s how it works:
Someone on your team—usually HR, payroll, or a staff accountant—gets an email that looks like it’s from your firm’s owner or managing broker.
The message is short, urgent, and familiar:
"Hey, I need copies of all employee W-2s for a quick review with our CPA. Can you send them over ASAP? I’m slammed today."
The tone feels right. The timing makes sense. Tax documents are flying around. Your team wants to be helpful.
So they send the files.
But the message wasn't from you.It came from a cybercriminal using a spoofed address or look-alike domain.
Now they have:
- Every employee’s full name
- Social Security number
- Home address
- Salary and tax ID data
Everything they need to file fraudulent tax returns before your team even blinks.
What Happens Next?
Your leasing agent files her tax return. It gets rejected: "This Social Security number has already been used."
She’s devastated.Now she's dealing with the IRS, setting up credit monitoring, and untangling identity theft—while still fielding vendor calls and helping tenants reset their portals.
Multiply that mess by your whole payroll. Then add the team meetings, the apology emails, and the long-term damage to trust.
This isn’t just an IT issue. It’s an HR disaster. A brand risk. A leadership credibility hit.
Why This Hits Salt Lake Property Teams So Hard
This scam doesn’t look like a joke. It works because:
- The timing is perfect. February is W-2 season. These requests don’t feel strange.
- The message feels real. It’s not "transfer $50K to a bank in Europe." It’s just W-2s.
- It preys on urgency. Property teams move fast. Everyone’s busy. Quick responses are the norm.
- It’s personalized. Scammers do their homework. They look up the owner’s name. They spoof domains that look like yours.
- Staff want to help. Especially if it seems like it came from the boss.
In real estate, where everyone juggles multiple platforms and vendor requests daily, it’s easy for one fake message to blend in with the rest.
5 Ways Salt Lake Property Firms Can Shut This Down
The good news? You don’t need a massive IT overhaul to stop this. You need clarity, consistency, and a little backup.
1. Make W-2s a "No Email Zone"
No exceptions. W-2s and payroll documents should never be sent via email—even internally. Use secure platforms with access control.
2. Always Verify Sensitive Requests in Another Channel
Got a "W-2 request" from the boss? Confirm it by phone or secure chat. Don’t reply to the email. Use known contact info.
3. Host a 10-Minute Tax Scam Huddle
Don’t wait for April. Block 10 minutes with your HR and accounting team this week. Show them what to watch for. One conversation now can prevent months of chaos.
4. Use MFA on Payroll Systems
Make sure your property management software (Yardi, AppFolio, Buildium) and any payroll tools are locked down with multi-factor authentication. MFA stops a stolen password from turning into a system breach.
5. Reward Staff for Verifying
The assistant who double-checks a CEO request isn’t being paranoid—they’re being smart. Make questioning a best practice, not a bottleneck.
This Isn’t Just a One-Off
The W-2 scam is the kickoff.
Between now and April, expect a flood of tax-themed attacks:
- Fake IRS notices
- Spoofed emails from your "CPA"
- Malware disguised as tax prep software
- Fraudulent vendor invoices tagged as "1099-related"
Scammers love Salt Lake tax season because everyone's busy, overwhelmed, and used to moving fast with financial documents.
But with the right IT services, these threats never make it to your team in the first place.
Is Your Property Management Firm Ready?
If your systems are locked down, your staff is trained, and you’ve got strong email security, great.
If not? Let’s fix that before this hits your inbox.
At Qual IT, we specialize in managed IT services for Salt Lake City property management companies. We understand the pace, pressure, and tech tools you deal with every day.
And we know how to keep your team safe—without slowing them down.
