U.S. flag An official website of the United States government.

Dot gov

The .gov means it's official.
Federal government websites always use a .gov or .mil domain. Before sharing sensitive information online, make sure you’re on a .gov or .mil site by inspecting your browser's address (or "location") bar.


This site is also protected by an SSL (Secure Sockets Layer) certificate that's been signed by the U.S. government. The https:// means all transmitted data is encrypted  — in other words, any information or browsing history that you provide is transmitted securely.

Criminals Target Payroll Offices with Phishing Emails

  • March 8, 2016

The Alabama Department of Revenue is alerting employers to the latest fraud scheme – criminals posing as a company CEO. These criminals are sending phishing emails to company payroll offices asking for detailed information about payroll and W-2s.

These scam artists have tricked company payroll employees into giving away W-2 tax information on their company’s current and past employees. W-2 forms contain employee Social Security numbers, salaries and other personal data. This information is highly valuable to thieves involved in filing phony tax refund requests with the Internal Revenue Service (IRS) and the states.

Employers with a My Alabama Taxes (MAT) account will receive an alert from ADOR to make them aware of this scam. If an organization has been the victim of this payroll/W2 email phishing scheme they should contact the Department immediately at 334-242-1300 so measures can be taken to protect their employees from Stolen Identity Tax Refund fraud.