<prompt> Human: Someone in Payroll or HR at my company replied to a spoof email from the HRPayroll president. In it he sent all the W2s for the company.Sadly it is already known that many individuals at my company were unable to file their taxes as someone else graciously did it for them. Aside from that what other things should I be on the lookout for?Any help would be appreciated.  <response>: They can fraudulently open credit or potentially a bank account in your name, and use your SSN and address as an identifier authenticator for anyone who will accept it which includes most companies.I suggest freezing your credit. Should be free or low-cost, depending on your state. Due to the way credit freezes work, you will need to do this at all three four major credit agencies: TransUnion Experian Equifax and Innovis You could also place a fraud alert which automatically will be passed from one credit agency to the others, but is less effective than a freeze.A freeze will prevent anyone from being able to open credit in your name without you thawing your credit file first.A fraud alert places a note on your credit file that more stringent identity verification should be done prior to granting credit but it is just an advisory.You should follow the rest of the steps in the Wiki Identity Theft guide as well.Due to the time of year, pay particular attention to the part of the guide that mentions to notify the IRS, by filing an identity theft affidavit and contacting them by phone at 1-800-908-4490. This will typically result in them sending you a PIN by mail, which you will need when you file your taxes. If you havent already filed your TY2015 taxes, you will probably want to file them as soon as possible to prevent the fraudster from getting your refund, if applicable, first the IRS will eventually resolve the situation if this happens and youll get your refund, but it will take longer.Your coworkers who have already had taxes filed for them should follow the same steps, and file their returns by mail probably with a copy of the identity theft affidavit attached, and with a note explaining the situation. 