However, many of the 87,000 figures include new hires to replace retiring agents over the next decade. Replacement hires are likely to be the bulk of the new hires, with more than 50% of the agency’s current employees becoming eligible for retirement over the next decade. Furthermore, the funds will not just be for IRS agents but also for IT technicians, taxpayer services support staff, and experienced auditors.
All-in-all, the IRS will be beefing up the number of employees with the new funding; but it will net somewhere between 20,000 – 30,000 new employees of all types. This would bring staffing levels back to where they were a little over a decade ago.
How Many Agents Will Really Be Armed
Related to the rumor of 87,000 new agents is that they will be armed and coming to bust down the doors of millions of Americans as part of stepped-up tax enforcement. Again, reality and news headlines are not lining up.
Collecting taxes can be a dangerous business. It is not just scouring checkbooks and bank records when it comes to tackling drug dealers, terrorists, and money launderers. In addition to forensic accounting, IRS Criminal Investigation Special Agents also work undercover inside criminal organizations.
In fact, they have been doing this for over one hundred years since the Criminal Investigation division (previously called the Intelligence Unit) was created in 1919 with just six agents. Think of taking down Mobsters like Al Capone based on tax fraud in the 1930s.
So, to put it in perspective, the IRS Criminal Investigation (CI) unit only has about 3,000 employees, of which about 2,100 are special agents. Only special agent carries guns.
Even with the new funding previously mentioned, the CI unit is looking to hire around 300-350 new Special Agents in 2022, with about half of that replacing retirees and those who leave the department. In the end, the IRS is only going to gain about 150 or so new gun-wielding agents.
What’s Your Best Defense
Now that you know you will not have an army of armed IRS agents busting down your door, what is your best defense against getting an unexpected bill from the IRS? First, make sure you are dealing with a reputable preparer. Ask for a copy of the practitioner’s license to do business as a tax preparer. Ask your friends for references of reputable CPAs or other tax practitioners.
Finally, review your tax return and ask questions about anything that you do not understand. Reputable preparers take pride in their work and are honest enough to admit when a mistake has been made. Do not be afraid to ask questions for fear of offending your preparer.
Conclusion
Returning to our original question, just who is responsible for your tax return? The simple answer is you are. Good tax preparers realize this and make every attempt to provide you with an accurate return because protecting you is their job. We congratulate you on your wisdom if you have just such a professional. If you are looking for someone who fits that bill, please consider giving us a call.
Your Tax Return “Whose Responsibility Is It?” Reboot
December 1, 2022 · Blog, Guest Article of the Month
⏱ 6 min read
This article is not for those of you who prepare your own tax returns. Let us face it, when you prepare your own return, you are responsible for what is or is not included on the forms. What if you have a CPA or other tax practitioner prepare your annual state and federal income tax returns? Who is responsible for the numbers on your Form 1040, then?
Who’s Responsible – You or your Tax Preparer
Many people have the misconception that once you turn over your tax information to a preparer, all you must do is sign the result and mail it in (or electronically file it). Nothing can be farther from the truth. That is not to say the tax preparer has no responsibility for the numbers included in the return. In fact, in Internal Revenue Service Circular 230, the government specifically states that a practitioner must exercise due diligence in preparing a tax filing, including determining the veracity of oral or written client representations. This does not mean a tax preparer must verify everything you tell him, but he or she must be satisfied that the amounts included on a tax return make sense.
The real problem in a case like this is not that additional tax was due, though that was bad enough. The real problem is that the understatement of taxes opens a taxpayer up to both penalties and interest. At a minimum, interest would be due because the IRS cannot, by law, forgive or abate interest. Add to that the potential for penalties on the late payment of income taxes, negligence, or filing of fraudulent returns – and it doesn’t take long for your tax bill to double.
Many times, taxpayers sign their returns and put them in the mail (snail or electronic) without reviewing the numbers. Either they trust the preparer implicitly (even if the numbers look wrong) or they are happy to have the tax return chore out of the way for another year. Whatever the reason, many taxpayers fail to double-check the preparer’s numbers.
Reviewing Your Return
Wait a minute – did you notice the error in that last paragraph? The error is in characterizing amounts on a tax return as the “preparer’s numbers.” Sure, the calculations may come from your CPA’s computer, but those numbers had better be the amounts you provided to your tax accountant. Any good preparer will welcome a second or third set of eyes checking the numbers to make sure the amounts are correct. That is because he or she knows that the taxpayer is ultimately responsible for the amounts included in the return. The preparer makes sure they are in the right place on the return.
Without naming names, there have been many recent cases where taxpayers were held liable for understated taxes plus penalties and interest. Simply put, ignorance of the law, or the numbers, is not considered an excuse for filing false and misleading returns.
An Army of New Agents?
Now that you know your role and responsibility in filing your tax return, the thought of the IRA hiring 87,000 new agents is keeping you up at night. This figure, which is being bandied about in the news, comes from the projected hiring of new agents from the almost $80 billion in new IRS funding over the next decade as part of the Inflation Reduction Act passed this past summer.
The truth is, yes, many new IRS agents will be hired. No, there will not be anywhere near 87,000 of them. The 87,000 figure comes from a Department of Treasury report from May 2021, which estimated the number of new hires.
However, many of the 87,000 figures include new hires to replace retiring agents over the next decade. Replacement hires are likely to be the bulk of the new hires, with more than 50% of the agency’s current employees becoming eligible for retirement over the next decade. Furthermore, the funds will not just be for IRS agents but also for IT technicians, taxpayer services support staff, and experienced auditors.
All-in-all, the IRS will be beefing up the number of employees with the new funding; but it will net somewhere between 20,000 – 30,000 new employees of all types. This would bring staffing levels back to where they were a little over a decade ago.
How Many Agents Will Really Be Armed
Related to the rumor of 87,000 new agents is that they will be armed and coming to bust down the doors of millions of Americans as part of stepped-up tax enforcement. Again, reality and news headlines are not lining up.
Collecting taxes can be a dangerous business. It is not just scouring checkbooks and bank records when it comes to tackling drug dealers, terrorists, and money launderers. In addition to forensic accounting, IRS Criminal Investigation Special Agents also work undercover inside criminal organizations.
In fact, they have been doing this for over one hundred years since the Criminal Investigation division (previously called the Intelligence Unit) was created in 1919 with just six agents. Think of taking down Mobsters like Al Capone based on tax fraud in the 1930s.
So, to put it in perspective, the IRS Criminal Investigation (CI) unit only has about 3,000 employees, of which about 2,100 are special agents. Only special agent carries guns.
Even with the new funding previously mentioned, the CI unit is looking to hire around 300-350 new Special Agents in 2022, with about half of that replacing retirees and those who leave the department. In the end, the IRS is only going to gain about 150 or so new gun-wielding agents.
What’s Your Best Defense
Now that you know you will not have an army of armed IRS agents busting down your door, what is your best defense against getting an unexpected bill from the IRS? First, make sure you are dealing with a reputable preparer. Ask for a copy of the practitioner’s license to do business as a tax preparer. Ask your friends for references of reputable CPAs or other tax practitioners.
Finally, review your tax return and ask questions about anything that you do not understand. Reputable preparers take pride in their work and are honest enough to admit when a mistake has been made. Do not be afraid to ask questions for fear of offending your preparer.
Conclusion
Returning to our original question, just who is responsible for your tax return? The simple answer is you are. Good tax preparers realize this and make every attempt to provide you with an accurate return because protecting you is their job. We congratulate you on your wisdom if you have just such a professional. If you are looking for someone who fits that bill, please consider giving us a call.
Disclaimer
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
Some taxpayers believe that the deduction for charitable donations is no longer applicable to them since it can be hard to make donations large enough to exceed the standard deduction. One strategy to overcome this challenge is to cluster your donations. Instead of making equal gifts every year, consider making more substantial gifts all in one year instead.
When it comes to making donations around year-end, it’s important to understand the rules on timing and when a gift is effectively deemed given for tax purposes. Here are the basic rules on timing of charitable donations.
To give to charity by check => the date the check is mailed
Gifts of stock certificates => when the transfer occurs, according to the issuer’s records
Gifts of stocks by electronic transfer => when the stock is received, according to the issuer’s records
Gifts by credit card => date the charge is made
Conclusion
As we enter the final part of the year, now is the time to take stock of your financial and tax situation to see if there are any moves you can make to minimize your 2022 tax liabilities and maximize your wealth.
The 2022 Tax Guide
December 1, 2022 · Blog, Tax and Financial News
⏱ 4 min read
Now is the time of year to do everything you can to minimize taxes and maximize your financial health with proper year-end planning. In this article, we’ll look at several actions to consider taking before the end of 2022.
Thoughtfully Harvest Losses and Gains Before Year-End
Tax loss harvesting by selling securities at a loss to offset capital gains is a classic year-end planning strategy. Just make sure not to violate the wash sale rules. This means you can’t buy back the same security or a substantially identical one within 30 days of the sale.
Reinvest Capital Gains into Opportunity Zones
Another way to offset capital gains is to reinvest those gains into a qualified opportunity fund (QOF). To be eligible, you must make the investment within 180 days of the sale of the asset-bearing gains. QOF investments allow you to defer the recognition of the capital gains tax on the original investment. The details and exact rules can be tricky, so it’s best to check with your tax advisor before making this type of transaction.
Consider Installment Sales Where Applicable
When a taxpayer sells a private asset such as real estate, a business, or private equity in exchange for a series of payments over multiple years through a promissory note, this can constitute an installment sale. Installment sales are generally taxed, with each payment representing a portion of the proceeds; return of basis, interest, and gain are recognized over the life of the note.
There are situations in which installment sales can be structured so that gains are not recognized until principal payments are recouped. If you are considering selling an asset via an installment sale this year-end or next, consult with your tax advisor to determine if it’s possible to structure the sale to defer gains.
Funding Retirement
If you can contribute to a retirement account, now is the time to see if you need to make additional contributions or top-up to the full amount allowable. As you review your situation, keep in mind the annual maximum contribution limits for 2022.
IRAs – $6,000. If you are 50 or older, it’s $7,000.
401(k)s/403(b)s — $20,500. If you are 50 or older, it’s $27,000
Also, converting assets from a traditional IRA to a Roth IRA may be a smart move if: you believe your tax rate will be higher in the future; you can afford to pay the taxes now with spare cash; and you don’t plan to leave the IRA assets to charity.
Take Your Required Minimum Distributions
The annual deadline to take required minimum distributions (RMD) from your own or inherited retirement accounts is Dec. 31, 2022. It’s important to take RMDs because there is a 50 percent penalty on amounts not distributed. The amount needed to be taken were determined on Dec. 31, 2021, even though the value of the investment has likely fluctuated significantly since that time. RMDs are based on a calculation of age and amount of assets. There are online calculators to help you figure out the amount you need to take.
Giving to Charity
Some taxpayers believe that the deduction for charitable donations is no longer applicable to them since it can be hard to make donations large enough to exceed the standard deduction. One strategy to overcome this challenge is to cluster your donations. Instead of making equal gifts every year, consider making more substantial gifts all in one year instead.
When it comes to making donations around year-end, it’s important to understand the rules on timing and when a gift is effectively deemed given for tax purposes. Here are the basic rules on timing of charitable donations.
To give to charity by check => the date the check is mailed
Gifts of stock certificates => when the transfer occurs, according to the issuer’s records
Gifts of stocks by electronic transfer => when the stock is received, according to the issuer’s records
Gifts by credit card => date the charge is made
Conclusion
As we enter the final part of the year, now is the time to take stock of your financial and tax situation to see if there are any moves you can make to minimize your 2022 tax liabilities and maximize your wealth.
Disclaimer
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
Unlike classical computing, whose information is encoded by bits, in quantum computing a qubit is the basic unit of quantum information. Qubit allows all combinations of information to exist simultaneously so that quantum computers can solve problems exponentially faster and with less energy consumption than classical computers.
Advanced development in this technology has also seen the introduction of quantum-computing cloud infrastructure through Quantum as a Service (QaaS). QaaS provides access to quantum computing platforms over the internet to customers. Major technology companies, such as Amazon, Alibaba, IBM, Google, and Microsoft, have already launched commercial cloud services for quantum computing.
With the continued increase in the quantum computing ecosystem and emerging business use cases, business leaders must stay aware and prepare to adopt the new technology.
Business Use Cases for Quantum Computing
1. Quick Data Analytics
Today more than ever, businesses are faced with big data and a large quantity of information requiring analysis and storage. Since classical computers are built to solve one task at a time, it takes longer to solve these complex problems.
However, quantum technology has the potential to turn complex computations into simple calculations that are solved in less time.
2. Optimize Investment Strategies
Optimization is all about finding the most ideal solution in a situation. When many options are available, it takes a classical computer a long time to find a solution. Therefore, classical computers use shortcuts, and the final solution is partly optimal. But, with quantum computing, there will be better optimization.
3. Better Forecast and Prediction
Businesses rely on forecasts and predictions generated after analyzing complex and large data sets. Quantum computing is built to process huge amounts of data quickly and more accurately. As a result, better forecasts and predictions will enable better decision-making.
4. Solve Problems With Financial Services
There are various computationally intensive jobs in finance that could be facilitated by quantum computing, such as credit-risk management, financial crime reduction, and trading strategy optimization. These tasks will greatly benefit from quantum algorithms that increase the speed of financial calculations.
5. Improve Data Security
Quantum computers are built to break encryptions that ordinary computers cannot. This might become a problem if hackers were to acquire encrypted data and store it until large-scale quantum computers are operational. To handle this problem, postquantum cryptography, a type of cyber security that can be used by conventional computers, is currently being developed. Therefore, a switch to quantum-resistant cryptography will prevent the possibility of data being exposed. At the same time, it will ensure better protection of digital assets.
Final Thoughts
Quantum computers will not replace classical computers; however, the two will form a hybrid solution whereby each task will be assigned to the most suitable machine – either quantum or classical.
Achieving the aforementioned benefits will require businesses to have teams of experts who are knowledgeable about the implications of quantum computing and who can recognize the company’s potential future needs, opportunities, and vulnerabilities.
With signs of commercial quantum computing becoming a reality, it’s not too early for business leaders to consider how it will encourage digital investment, reshape industries and ignite innovation. Therefore, having a thorough understanding of quantum applications is essential for positioning a business to gain a competitive edge.
Quantum Computing Uses That Solve Business Problems
November 1, 2022 · Blog, What's New in Technology
⏱ 4 min read
Early technology adopters are more likely to gain better business results, including higher revenue growth and market position. With businesses facing complex problems every day, it is no doubt that they are always watching out for the next big tech that offers a better solution.
Although still in its infancy stages, quantum computing is a technology whose commercial use will disrupt the business environment.
What is Quantum Computing?
Quantum computing is a technology that focuses on manipulating and controlling different laws of physics. This non-classical technology uses quantum mechanical concepts like superposition and quantum entanglement.
The idea of quantum computing is not new and has come a long way. The first algorithm of large integer factorization for quantum computing was introduced in 1994. This algorithm intended to reduce the time it would take classical computers to find the prime factors of large numbers. It’s worth noting that the majority of the current infrastructure for encryption and information security is built on prime factorization.
Since the first algorithm was developed, more technological advances have been reported, and the field is continuously receiving funding. According to the McKinsey & Company Quantum Technology Monitor, funding from private and public sectors for this new technology is skyrocketing worldwide.
How it Works
Unlike classical computing, whose information is encoded by bits, in quantum computing a qubit is the basic unit of quantum information. Qubit allows all combinations of information to exist simultaneously so that quantum computers can solve problems exponentially faster and with less energy consumption than classical computers.
Advanced development in this technology has also seen the introduction of quantum-computing cloud infrastructure through Quantum as a Service (QaaS). QaaS provides access to quantum computing platforms over the internet to customers. Major technology companies, such as Amazon, Alibaba, IBM, Google, and Microsoft, have already launched commercial cloud services for quantum computing.
With the continued increase in the quantum computing ecosystem and emerging business use cases, business leaders must stay aware and prepare to adopt the new technology.
Business Use Cases for Quantum Computing
1. Quick Data Analytics
Today more than ever, businesses are faced with big data and a large quantity of information requiring analysis and storage. Since classical computers are built to solve one task at a time, it takes longer to solve these complex problems.
However, quantum technology has the potential to turn complex computations into simple calculations that are solved in less time.
2. Optimize Investment Strategies
Optimization is all about finding the most ideal solution in a situation. When many options are available, it takes a classical computer a long time to find a solution. Therefore, classical computers use shortcuts, and the final solution is partly optimal. But, with quantum computing, there will be better optimization.
3. Better Forecast and Prediction
Businesses rely on forecasts and predictions generated after analyzing complex and large data sets. Quantum computing is built to process huge amounts of data quickly and more accurately. As a result, better forecasts and predictions will enable better decision-making.
4. Solve Problems With Financial Services
There are various computationally intensive jobs in finance that could be facilitated by quantum computing, such as credit-risk management, financial crime reduction, and trading strategy optimization. These tasks will greatly benefit from quantum algorithms that increase the speed of financial calculations.
5. Improve Data Security
Quantum computers are built to break encryptions that ordinary computers cannot. This might become a problem if hackers were to acquire encrypted data and store it until large-scale quantum computers are operational. To handle this problem, postquantum cryptography, a type of cyber security that can be used by conventional computers, is currently being developed. Therefore, a switch to quantum-resistant cryptography will prevent the possibility of data being exposed. At the same time, it will ensure better protection of digital assets.
Final Thoughts
Quantum computers will not replace classical computers; however, the two will form a hybrid solution whereby each task will be assigned to the most suitable machine – either quantum or classical.
Achieving the aforementioned benefits will require businesses to have teams of experts who are knowledgeable about the implications of quantum computing and who can recognize the company’s potential future needs, opportunities, and vulnerabilities.
With signs of commercial quantum computing becoming a reality, it’s not too early for business leaders to consider how it will encourage digital investment, reshape industries and ignite innovation. Therefore, having a thorough understanding of quantum applications is essential for positioning a business to gain a competitive edge.
Disclaimer
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.
Cybercriminals are able to execute social engineering attacks by accessing readily available information online. They can research a business, employees and executives. The criminal will even use an actual event picked from social media – for instance, a financial director who is just returned to work from a holiday – to sound more legitimate.
This emerging security threat is also made possible by the development of video editing software that can swap faces and alter facial expressions. Such developments have enabled deepfakes to fool biometric checks (like facial recognition) to verify user identities.
The deepfake cybersecurity threat has become such a concern that the Federal Bureau of Investigation (FBI) has issued a Private Industry Notification (PIN) cautioning companies of the possible use of fake content in a newly defined cyberattack vector referred to as Business Identity Compromise (BIC).
How to be Prepared and Protect Against Deepfakes
Deepfake videos and images can be recognized by checking for unnatural body shape, lack of blinking in videos, unnatural facial expressions, abnormal skin color, bad lip-syncing, odd lighting, awkward head and body positioning, etc. However, cybercriminals keep evolving and creating more convincing deepfakes.
Other measures introduced to combat deepfakes include creating solutions that detect deepfakes. There also was an introduction of deepfake legislation in the National Defense Authorization Act (NDAA) in December 2019.
Unfortunately, this has not been enough, and enterprises have the task of helping reduce the impact of these attacks. The following measures can help:
Use anti-fake technologies Businesses should explore automated technologies that help identify deepfake attacks. They should also consider watermarking images and videos.
Enforce robust security protocols Implement security protocols to help avoid deepfakes, such as automatic checks for any procedure involving payments. For instance, putting systems that allow verification through other mediums.
Develop new security standards As security threats keep evolving, so should security standards within a company. For instance, introduce new security standards involving phone and video calls.
Training and awareness Enterprises should enforce regular training and raise awareness among employees, management, and shareholders on the dangers of deepfakes to businesses. When all involved parties are trained to identify deepfake social engineering efforts, this will help reduce the chances of falling victim.
Keep user data private Deepfake attackers use the information found in public domains such as social media. Although not a failsafe procedure, company profiles can be made private. Users also should avoid adding or connecting with strangers they don’t know and posting too much personal information online.
Disinformation response policy Some deepfake incidents are out of control for an enterprise, such as fake videos purporting to be from top management. However, establishing a disinformation response plan will help in cases of a reputation crisis. This should include monitoring and curating all multimedia output – which will help present original content to the public as authentic content.
Conclusion
Deepfake is an emerging cybersecurity concern that requires enterprises to be aware of its potential threats and stay prepared. Although it might be possible to identify a poorly generated deepfake with the naked eye, the technology continues to advance. In response, countermeasures must keep pace.
Increase In Deepfake Attacks and How Enterprises Can Prepare
October 1, 2022 · Blog, What's New in Technology
⏱ 4 min read
Deepfake technology utilizes machine learning and artificial intelligence (AI) to manipulate or create synthetic audio, video and images that appear authentic. Deepfakes are commonly featured in entertainment and politics to spread false information and propaganda. For instance, deepfake has been used to show a celebrity or leader saying something that they didn’t, and this creates fake news.
Unfortunately, in deepfakes, cybercriminals have found a new tool for cyberattacks. Cybercriminals are now using deepfakes to pose a variety of enterprise risks.
How Cybercriminals Are Using Deepfakes
Deepfake technology is now used to create scams, hoaxes and false claims that undermine and destabilize organizations. For instance, a manipulated video might show a senior executive associated with fake news, such as admitting to a financial crime or spreading misinformation about a company’s products. Such corporate sabotage costs a lot of time and money to disprove and can impact a business’s reputation.
Another way businesses can be negatively impacted is through social engineering attacks such as phishing, which relies on impersonation to compromise an email. Similarly, social engineering using deepfakes can feature voice or video impersonations. A good example of such an impersonation was reported in The Wall Street Journal, in which fraudsters used AI to mimic a CEO’s voice. This incident happened in March 2019, when criminals impersonated a chief executive’s voice to direct a payment of $243,000.
Cybercriminals are able to execute social engineering attacks by accessing readily available information online. They can research a business, employees and executives. The criminal will even use an actual event picked from social media – for instance, a financial director who is just returned to work from a holiday – to sound more legitimate.
This emerging security threat is also made possible by the development of video editing software that can swap faces and alter facial expressions. Such developments have enabled deepfakes to fool biometric checks (like facial recognition) to verify user identities.
The deepfake cybersecurity threat has become such a concern that the Federal Bureau of Investigation (FBI) has issued a Private Industry Notification (PIN) cautioning companies of the possible use of fake content in a newly defined cyberattack vector referred to as Business Identity Compromise (BIC).
How to be Prepared and Protect Against Deepfakes
Deepfake videos and images can be recognized by checking for unnatural body shape, lack of blinking in videos, unnatural facial expressions, abnormal skin color, bad lip-syncing, odd lighting, awkward head and body positioning, etc. However, cybercriminals keep evolving and creating more convincing deepfakes.
Other measures introduced to combat deepfakes include creating solutions that detect deepfakes. There also was an introduction of deepfake legislation in the National Defense Authorization Act (NDAA) in December 2019.
Unfortunately, this has not been enough, and enterprises have the task of helping reduce the impact of these attacks. The following measures can help:
Use anti-fake technologies Businesses should explore automated technologies that help identify deepfake attacks. They should also consider watermarking images and videos.
Enforce robust security protocols Implement security protocols to help avoid deepfakes, such as automatic checks for any procedure involving payments. For instance, putting systems that allow verification through other mediums.
Develop new security standards As security threats keep evolving, so should security standards within a company. For instance, introduce new security standards involving phone and video calls.
Training and awareness Enterprises should enforce regular training and raise awareness among employees, management, and shareholders on the dangers of deepfakes to businesses. When all involved parties are trained to identify deepfake social engineering efforts, this will help reduce the chances of falling victim.
Keep user data private Deepfake attackers use the information found in public domains such as social media. Although not a failsafe procedure, company profiles can be made private. Users also should avoid adding or connecting with strangers they don’t know and posting too much personal information online.
Disinformation response policy Some deepfake incidents are out of control for an enterprise, such as fake videos purporting to be from top management. However, establishing a disinformation response plan will help in cases of a reputation crisis. This should include monitoring and curating all multimedia output – which will help present original content to the public as authentic content.
Conclusion
Deepfake is an emerging cybersecurity concern that requires enterprises to be aware of its potential threats and stay prepared. Although it might be possible to identify a poorly generated deepfake with the naked eye, the technology continues to advance. In response, countermeasures must keep pace.
Disclaimer
These articles are intended to provide general resources for the tax and accounting needs of small businesses and individuals. Service2Client LLC is the author, but is not engaged in rendering specific legal, accounting, financial or professional advice. Service2Client LLC makes no representation that the recommendations of Service2Client LLC will achieve any result. The NSAD has not reviewed any of the Service2Client LLC content. Readers are encouraged to contact a professional regarding the topics in these articles. The images linked to these articles are protected by copyright and should not be copied for any reason.