Cybersecurity

  • Cybersecurity Check: Three Cyber Threats That Can Hit Tax Offices — and 3 Things to Do First

    Tax season is peak season, but post season isn’t the time to keep your guard down — and cybercriminals know it. A bad email or fake “urgent” request can lead to stolen logins, client data exposure, or days of lost productivity. The good news: you don’t need to be a tech expert to reduce your…

  • Common Phishing Scams Targeting Tax Preparers

    By: Oscar Hernandez-Gutierrez, Security Operations Analyst, Drake Software  In my current role as a Security Operations Analyst, I’ve seen firsthand how threat actors exploit this critical period to launch sophisticated phishing campaigns aimed at tax professionals. These attacks are often well-crafted, highly targeted, and capable of inflicting serious damage on both firms and their clients. In…

  • How Tax Preparers May Enhance Security with MFA

    In the digital age, data security is not just a best practice—it’s a professional obligation, especially for tax preparers handling sensitive financial information. One of the most effective tools in your defense toolkit is Multi-Factor Authentication (MFA). Yet, despite warnings from the IRS and software providers, some users still disable MFA, viewing it as inconvenient. However,…

  • AI & Cybersecurity in Tax Practice: How to Protect Your Firm and Your Clients

    As tax professionals, we handle some of the most sensitive data in the financial ecosystem — Social Security numbers, bank account details, incomes, and identity credentials. That trust also makes our firms high‑value targets for criminals seeking to exploit weaknesses for fraud, identity theft, and ransomware attacks. In an era when artificial intelligence (Cybersecurity Awareness and WISP Planning…

  • SMS Now Available for MFA

    Great news! SMS text messaging is now available as a method for multi-factor authentication (MFA). Previously, MFA required an authenticator app. With this update, you can now choose to receive your authentication code via text message during login, offering a more convenient option without compromising security. You must Opt-In to receive SMS for MFA. The…

  • Drake Alert: Beware of Phishing Emails Asking for EFIN

    We have received reports of emails sent to users as themselves or from Gmail emails with the from sender name, as if they are Drake Software® and use language that looks like an IRS or Drake Software request for EFIN verification. These phishing messages are not from Drake Software. What’s Happening They are spoofed emails…

  • AI and Cybersecurity Trends Every Tax Professional Should Watch

    As the demand for digital tax services grows, so do the risks associated with protecting sensitive client data. At the same time, AI is also being used to strengthen cybersecurity defenses. For tax preparers, understanding this dual role is critical to maintaining a secure and compliant practice during peak filing season and beyond. The Role…

  • Beware of Unauthorized Drake Software Offers: How to Stay Protected

    Recently, one of our valued customers reported receiving a suspicious call from an unfamiliar number offering a “discounted” version of Drake Software. We want to make it absolutely clear: this offer was not legitimate. Here is how to stay informed and protected: Avoid Third-Party Software Offers If you receive unsolicited emails, calls, or messages offering…

  • Protecting Tax Clients from Scams: 2025 IRS Filing Updates

    This month, the IRS—partnering with the Security Summit—is spotlighting identity theft prevention for tax professionals, addressing increasing concerns over delays related to fraud and Employee Retention Credit claims. Here is a review of a few scams to be aware of. IRS and CASST Take Action to Combat Tax Fraud The IRS and CASST are implementing…

  • Protect Your Account: Recent Tax Fraud Scams

    Tax Fraud Scams Cyber threats are on the rise, and protecting sensitive information has never been more critical. At Drake we continue to monitor for scams and bring you the latest cyber news to help keep you informed. Some examples of recent fraud scams include:  1. EFIN Phishing Cybercriminals impersonate software providers instructing the tax…