Over $800,000 Tax Refund Vanished Overnight: Shocking True Story + How to Make Sure It Never Happens to You

Just a couple of months ago, Steven Ware, a 63-year-old from Yonkers, New York, was sentenced to 40 months in federal prison for a tax fraud scheme. In December 2023, he impersonated a managing partner at a Connecticut investment company, using the executive’s stolen identity (including name, SSN, DOB, and other details) to open bank accounts at a Massachusetts credit union.

He then deposited a stolen U.S. Treasury tax refund check worth $810,337 made out to the company and the executive. Once the funds cleared, Ware wired out over $634,000 and used a linked debit card for luxury goods, Apple products, gift cards, and more across New York, New Hampshire, and Massachusetts.

The fraud was uncovered through a multi-agency investigation involving IRS Criminal Investigation, the FBI, U.S. Postal Inspection Service, Treasury Inspector General for Tax Administration, and local police.

Ware was arrested in September 2024, indicted shortly after, pleaded guilty in July 2025 to bank fraud and aggravated identity theft, and was sentenced on January 14, 2026. He was also ordered to pay over $322,000 in restitution. The IRS spotlighted the case on January 15 as a prime example of tax-related identity theft.

I’ve seen these types of incidents ripple through business owners and individuals alike.

Here’s how to spot it, what to do if you’re hit, and how to avoid becoming the next victim.

Warning Signs You’re a Victim

IRS letters about unreported income, audits, or refunds you didn’t claim.
E-file rejections because someone has already filed using your SSN.
Unexpected W-2s/1099s from jobs you never held.
Denied unemployment or benefits due to “current” employment records.

If It Happens to You: Act Fast

File IRS Form 14039 (Identity Theft Affidavit) immediately on IRS.gov.
Report to the FTC at IdentityTheft.gov for a step-by-step recovery plan.
Notify the Social Security Administration about earnings mismatches.
Place a fraud alert or credit freeze with Equifax, Experian, and TransUnion.
Request your IRS tax transcripts to review activity under your name.
File a complaint of cyber fraud at www.ic3.gov
Call your local FBI field office or Secret Service within 72 hours of lost funds.

Proven Ways to Avoid Tax Fraud

Get an IP PIN proactively: it’s free, annual, and blocks fake returns in your name.
File your taxes early to beat fraudsters.
Use strong passwords + 2FA on IRS accounts; never respond to unsolicited “IRS” calls, texts, or emails (they don’t contact that way first).
Shred sensitive docs, monitor credit reports, and stay on top of the IRS “Dirty Dozen” scams.

Tax season doesn’t have to be stressful beyond the usual. If this hits close to home or you want to review your agency’s cyber insurance for better fraud coverage, just reach out—I’m here to help keep things secure and running smoothly.

For business owners, a dedicated cyber liability policy is even more valuable. It can cover first-party costs if a breach leads to tax-related issues (e.g., notifying affected employees, providing credit monitoring after a W-2 data exposure), third-party liability, legal defense, and sometimes social engineering/fraud elements that tie into employment identity theft. It could even reimburse personal losses directly if your data was stolen from your business during a covered incident and enabled the fraud.

If you’d like a complimentary cybersecurity insurance gap review, please reach out to me at [email protected]