Tax records contain enough information to make identity theft especially damaging. Security does not require complicated technology, but it does require consistent habits. Slow down when a message creates urgency, and verify requests using a contact method you already trust.
Use the secure portal for sensitive files
Do not send complete tax returns, Social Security numbers, identification documents, or financial statements through ordinary email. Use the provider-hosted secure client portal designated by Tax Smart Service, and check the web address before signing in.
Protect every account with strong access controls
Use a unique password for your portal and email account. A password manager can generate and store long passwords. Turn on multi-factor authentication wherever it is available, especially for email, banking, payroll, and tax accounts.
Recognize common warning signs
- Unexpected messages demanding immediate payment
- Threats involving arrest, deportation, license cancellation, or account closure
- Requests for gift cards, cryptocurrency, or unusual wire transfers
- Links that imitate a familiar company but use a different web address
- Requests to send identity documents through an unapproved channel
- Promises of a refund or credit that sound too good to be true
Verify before you respond
Do not use the phone number or link in a suspicious message. Contact the organization using a number from an official statement or a website you reach independently. If a request appears to come from Tax Smart Service, call our published office number to confirm it.
Secure stored and discarded records
Keep paper returns in a locked location and digital copies on encrypted, access-controlled storage. Avoid leaving documents in a vehicle or shared workspace. Shred records that are no longer needed instead of placing them intact in household trash.
If something seems wrong
Change affected passwords, contact financial institutions, and preserve copies of suspicious messages. Tell your tax professional if a return was rejected unexpectedly or if you receive a notice about activity you do not recognize. Quick reporting can limit further harm.
Security works best when everyone in the household or business knows the approved process. Decide in advance where documents will be stored, how they will be shared, and who should be contacted when a request is uncertain.