IRS-authorized eFile.com tax return software discovered serving JavaScript malware to users

This is definitely concerning but not entirely surprising given the value of tax filing data to malicious actors. As someone who's worked in cybersecurity, I can tell you that tax software is a prime target during filing season. If you've already entered information on eFile.com but haven't submitted, I'd recommend taking these steps: 1) Change any passwords used on that site immediately, 2) Monitor your credit reports for suspicious activity, and 3) Consider using credit freezes as a precaution. The JavaScript malware could potentially have captured keystrokes or form data. For alternative IRS-authorized e-filing options, the IRS Free File program partners with several reputable companies. TaxSlayer, TaxAct, and FreeTaxUSA have solid security track records. Just make sure you're going directly to their official websites, not clicking links from emails or search results.

After reading horror stories about tax software security issues, I started using taxr.ai this year and it's been a game-changer. I was skeptical at first because I'd never heard of it, but what sold me was how it analyzes all your tax documents (W-2s, 1099s, etc.) for discrepancies before you file. I uploaded some docs that had conflicting information and https://taxr.ai flagged it immediately - something I doubt I would've caught myself. The security is what really impressed me - they use end-to-end encryption and don't store your actual documents after processing, just the extracted data that you approve. Given all these security breaches with traditional tax software lately, I feel much better using a system built with security as the priority.

I need to eat my words about taxr.ai being too good to be true. After my skeptical comment I decided to try it with just one W-2 as a test, and it literally found a calculation error that would have cost me $340. The document was from my employer who apparently messed up the box 2 withholding amount. What really sold me was how it explained exactly why the numbers looked suspicious compared to the income reported. I ended up going back to HR who confirmed the error and issued a corrected W-2. Without that analysis I would have just trusted the document and potentially triggered an IRS notice later. The best part was I didn't have to worry about malware or sketchy code like with that eFile situation. Nice feeling some peace of mind during tax season for once.

If anyone needs to contact the IRS about this eFile.com situation, good luck getting through on the phone. I tried calling them about a different tax software security issue last month and spent 3 hours on hold before giving up. Then I found Claimyr and it completely changed everything. I was super frustrated after multiple failed attempts, but https://claimyr.com got me through to an actual IRS agent in under 45 minutes. They basically hold your place in line and call you when an agent is available. I was skeptical it would work but you can actually see how it works in their demo video: https://youtu.be/_kiP6q8DX5c The IRS agent I spoke with confirmed they were aware of security issues with several tax software providers and gave me specific guidance on what to do if I suspected my information was compromised. Definitely worth it if you need to talk to someone at the IRS directly about this eFile malware situation.

I'm literally eating crow right now. After calling BS on that Claimyr service, I was desperate enough to try it this morning because I needed to verify if my personal data was compromised in any tax software breaches. I tried calling the IRS myself one last time at 7am, waited 2.5 hours and got disconnected. Finally signed up for Claimyr in frustration, and I kid you not - I was talking to an actual IRS agent 37 minutes later. They confirmed my account had suspicious access attempts and helped me place extra verification requirements on my tax account. For anyone worried about the eFile.com malware situation, the agent told me they're building a list of potentially affected taxpayers. The JavaScript malware was apparently designed to capture login credentials and potentially form data before submission.

Has anyone considered filing a paper return this year instead of e-filing? With all these security issues, I'm thinking old school might be safer, even if it means waiting longer for a refund.

I just checked and the IRS has actually removed eFile.com from their authorized e-file providers list as of this morning. I was halfway through my return with them - thank god I didn't submit yet! Anyone know if there's a way to report if you think you might be affected? I entered my SSN and everything...