How To Identify And Avoid Payroll Phishing Email Scams
Andy Scheu • February 26, 2019

Identify Phishing Emails


The IRS has issued a warning about an increase in phishing email scams directed at payroll and HR personnel. The scams generally involve employee W2’s, direct deposit information, or wire transfers. If successful, these scams can cost your company and your employees thousands of dollars. Here is a description of each scam, and how to identify them.


W2 Scam: The email will impersonate a company executive and request copies of employee W2’s, or a report that details employee social security numbers, home address, and salary information. Once the scammer has this information they will be able to file fraudulent tax returns and collect those employees’ tax returns.


Direct Deposit Scam: The email will impersonate a real company employee, often an executive, and request that their direct deposit information be changed for payroll purposes. The bank account information that they provide will be for an account controlled by the scammer, and once payroll is processed, they will receive the impersonated employee’s wages.


Wire Transfer Scam: The email will impersonate a company executive and is sent to the company representative in charge of wire transfers. The email will request that a wire transfer is made to an account that is controlled by the scammer.

Other scams include fake invoices, gift card requests, and title escrow payments. Here is an example of a phishing email one of our employees, Teresa, received from someone impersonating me, Andy Scheu.



A white envelope with a blue signature on it


How to Avoid Becoming a Victim


Wrong Email: Teresa noticed that the sender’s email address was different from my actual email address.


Follow Up: Teresa contacted me personally to verify whether or not I had sent the email, and learned that I had not.


Don’t Click: Teresa knows never to click on links or attachments sent by unknown email addresses.


Time & Pay employees take the necessary precautions to make sure that we avoid falling victim to phishing emails, and we hope we can help you do the same.


We strongly suggest you share this post with all of your employees so that they are aware of these scams, and that you implement internal checks and balances to avoid costly mistakes.




Contact Us

By Andy Scheu May 14, 2026
Tennessee employers should prepare for new noncompete restrictions taking effect July 1, 2026. Learn what the law means for your business and employment agreements.
By Andy Scheu May 7, 2026
Learn how new paid leave laws, AI employment regulations, and multi-state HR compliance trends are impacting employers in 2026 — and what businesses should do now to stay prepared.
Payroll & HR updates graphic with people reviewing documents. Includes a graph, coins, scales, books, and a gavel.
By Andy Scheu January 28, 2026
Key Employment & Payroll Updates Employers Should Know – January 2026 Staying compliant as an employer means keeping up with changes that affect wages, workplace policies, and employee leave. As we head into 2026, several federal updates are worth your attention—particularly around earnings trends, harassment guidance, and Family and Medical Leave Act (FMLA) administration. Here’s a breakdown of what changed and what it means for employers. Real Average Hourly Earnings Remained Flat in December 2025 According to the U.S. Bureau of Labor Statistics , real average hourly earnings for all U.S. employees were unchanged from November to December 2025. While average hourly earnings increased by 0.3 percent during the month, that increase was offset by a matching 0.3 percent rise in the Consumer Price Index (CPI). In other words, workers saw nominal wage growth, but inflation absorbed those gains. Looking year over year, real average hourly earnings rose 1.1 percent from December 2024 to December 2025. Why this matters for employers: Flat real wage growth can influence employee sentiment, retention, and compensation planning. Even when wages increase on paper, employees may not feel the benefit if inflation keeps pace. Employers evaluating pay strategies in 2026 should factor in cost-of-living pressures alongside competitive wage benchmarking. EEOC Rescinds 2024 Harassment Guidance on Gender Identity The U.S. Equal Employment Opportunity Commission has voted to rescind its 2024 Enforcement Guidance on Harassment in the Workplace. That guidance relied heavily on the Bostock v. Clayton County decision, which held that discrimination based on sexual orientation or gender identity constitutes sex discrimination under Title VII of the Civil Rights Act. The rescinded guidance included examples such as the intentional misuse of pronouns or denying access to bathrooms consistent with an individual’s gender identity. The revocation follows a 2025 federal court ruling in Texas that struck down the guidance. Why this matters for employers: While the specific EEOC guidance has been withdrawn, the underlying Supreme Court precedent has not changed. Employers should avoid assuming this revocation eliminates risk. Title VII protections still apply, and workplace harassment claims may still be evaluated under existing federal law, state law, and company policy. This is a good time to review harassment policies and training materials with legal counsel. DOL Clarifies How Travel Time Applies Under FMLA The U.S. Department of Labor , through its Wage and Hour Division, has issued a new Opinion Letter clarifying how travel time can count toward an employee’s FMLA entitlement. The guidance confirms that time spent traveling to and from medical appointments may be counted as FMLA leave when the travel is related to receiving care for a serious health condition. Importantly, healthcare providers are not required to estimate or certify travel time. The DOL provided several practical examples: • Travel time to and from a dialysis appointment, along with treatment time that overlaps with scheduled work hours, is FMLA-protected. • When an employee transports a parent to medical appointments for a serious health condition, all time spent traveling, waiting, attending the appointment, and returning to work may be counted as FMLA leave—even if the appointment itself is brief. • Leave taken for activities unrelated to medical care, such as accompanying a child on a school field trip, is not FMLA-protected—even if the child has a serious health condition. • Only the portion of leave related to medical care and necessary travel is protected; unrelated personal errands cannot be counted against FMLA entitlement. Why this matters for employers: This clarification reinforces the need for accurate FMLA tracking. Employers should ensure supervisors and HR teams understand that intermittent leave may include more than just appointment time. Clear policies and consistent documentation practices can help prevent miscounts, disputes, and compliance issues. Final Takeaway for Employers These updates highlight a common theme: compliance is rarely static. Wage trends affect workforce expectations, court decisions influence policy enforcement, and regulatory guidance continues to evolve.  Employers should consider reviewing: • Compensation strategies for 2026 • Harassment policies and training materials • FMLA tracking and leave administration procedures Staying proactive reduces risk—and helps build trust with employees in an increasingly complex regulatory environment. Sources & Reference URLs • U.S. Bureau of Labor Statistics – Real Earnings News Release https://www.bls.gov/news.release/realer.htm • U.S. Equal Employment Opportunity Commission – Enforcement Guidance Updates https://www.eeoc.gov • Bostock v. Clayton County (2020) – Supreme Court Decision https://www.supremecourt.gov/opinions/19pdf/17-1618_hfci.pdf • U.S. Department of Labor – Wage and Hour Division Opinion Letters https://www.dol.gov/agencies/whd/opinion-letters • Family and Medical Leave Act (FMLA) Overview https://www.dol.gov/agencies/whd/fmla