How to Spot a Fake W-2: Red Flags, Verification, and Reporting

To spot a fake W-2, start with how the form looks, then check whether the numbers hold together mathematically. Real W-2s come out of payroll software, so they print cleanly, use one font throughout, and follow strict rules: Social Security tax equals 6.2% of Social Security wages, Medicare tax equals 1.45% of Medicare wages, and neither figure is ever a suspiciously round number. Forgers usually miss on one of those fronts.

Visual Red Flags

The physical document is the first tell. Legitimate W-2s come from payroll software or professional payroll services, and they look like it.

Check the print quality. Blurry text, pixelated numbers, or low-resolution logos suggest the form was assembled in an image editor or word processor rather than exported from payroll software. Real W-2s print sharply and consistently across every box.

Look at the fonts. A genuine W-2 uses the same font family throughout. If the employer name is in one typeface and the dollar amounts are in another, or if font sizes shift from box to box, someone likely assembled the form manually. Numbers that look pasted in, with ink color or weight that doesn’t quite match the surrounding text, are a strong signal.

Alignment matters too. The W-2’s box grid follows exact specifications published by the Social Security Administration. Unevenly spaced boxes, borders that don’t line up, or text sitting too high or low within a field all suggest the document wasn’t generated by approved software. Paper that feels unusually thin, thick, or off-color compared with tax forms you’ve received before is another warning.

Any visible evidence of alteration settles it. White-out residue, correction tape, obvious digital cloning artifacts, or text layered on top of other text all indicate tampering.

Mathematical Red Flags

The numbers are where most fakes fall apart. Forgers pick round, plausible-sounding figures without realizing the boxes have to relate to each other in specific ways. These are the checks that catch the most fakes.

Social Security Tax Check

Box 4 should equal Box 3 multiplied by 6.2%. For 2026, Box 3 cannot exceed $184,500, the Social Security wage base for the year. That means Box 4 can never be higher than $11,439.1Social Security Administration. Contribution and Benefit Base If a W-2 shows $190,000 in Box 3 or Social Security tax of $14,000, the form is fabricated. Run the multiplication yourself. Even a small discrepancy is suspicious because payroll software calculates this to the penny.

Medicare Tax Check

Box 6 should equal Box 5 multiplied by 1.45%. Medicare has no wage cap, so Box 5 will typically match or exceed Box 1. For employees earning above $200,000, an additional 0.9% Medicare tax kicks in on the excess and should also appear in Box 6. If Medicare withholding doesn’t track to 1.45% of the wages in Box 5, the form has a problem.

Suspiciously Round Numbers

Real payroll runs through biweekly or semi-monthly pay periods, pre-tax deductions, overtime, and partial-period adjustments. The result is almost never a perfectly round number. A W-2 showing exactly $65,000.00 in Box 1 and exactly $10,000.00 in Box 2 was likely typed by hand. Genuine figures tend to look more like $64,837.52 and $9,712.18.

Withholding That Doesn’t Fit the Income

Federal income tax in Box 2 should land somewhere reasonable for the reported wages. The exact amount depends on filing status and withholding elections, but there’s a plausible range. Someone reporting $50,000 in wages with $25,000 in federal withholding either had extreme withholding preferences or the document is fabricated. Very high wages paired with almost no withholding is equally suspicious unless the employee claimed exempt on their W-4.

Relationship Between Boxes 1, 3, and 5

These three wage figures are related but not always identical. Box 1 reflects taxable wages after certain pre-tax deductions like retirement contributions. Box 3 reflects Social Security wages, which include some deductions that Box 1 excludes but stops at the wage base. Box 5 reflects Medicare wages with no cap. On most W-2s for employees earning under the Social Security wage base, Boxes 3 and 5 will be close to each other and at or slightly above Box 1. If these figures are wildly different with no logical explanation, something is off.2Office of the Law Revision Counsel. 26 U.S.C. 6051 – Receipts for Employees

Identifying Data Red Flags

Beyond the math, the identifying details on a fake W-2 frequently contain errors that a real employer’s payroll system wouldn’t produce.

Check the Social Security number carefully. Beyond obvious formatting mistakes, compare it against the employee’s actual SSN from a reliable source. An incorrect SSN could indicate either a sloppy forgery or deliberate identity fraud.

Employer details deserve close scrutiny. A vague or generic company name, an address that doesn’t match publicly available business records, or a missing EIN are all warning signs. Every legitimate employer that withholds taxes has a nine-digit EIN assigned by the IRS. If the EIN field is blank, contains fewer than nine digits, or looks fabricated, the form is suspect. Confirming someone else’s EIN isn’t straightforward since the IRS doesn’t offer a public lookup tool for third parties, but you can cross-reference the number against the employer’s other documents or contact the employer directly.

Misspelled employee or employer names, incorrect addresses, and formatting inconsistencies in the SSN or EIN fields all point to manual creation rather than payroll software output. Real systems pull this information from verified databases and rarely produce typos in core identifying fields.

How to Verify a Suspicious W-2

Contact the Employer Directly

The most straightforward step is calling the employer’s payroll or human resources department. Look up the employer’s phone number independently rather than using the contact information printed on the questionable W-2. Ask the employer to confirm whether they issued a W-2 to the named employee and whether the reported wages match their records.

Request an IRS Wage and Income Transcript

The IRS keeps records of every W-2 filed with the Social Security Administration, and you can request a Wage and Income Transcript that shows this data. The transcript displays income reported on W-2s, 1099s, and other information returns for a given tax year.3Internal Revenue Service. Transcript Types for Individuals and Ways to Order Them You can access it through your IRS Online Account, or order a transcript by mail by calling the automated phone service at 800-908-9946.

One timing constraint matters: wage and income data for the current processing year generally doesn’t appear in IRS systems until the first week of February.3Internal Revenue Service. Transcript Types for Individuals and Ways to Order Them If you’re trying to verify a W-2 in mid-January, the transcript may not have the data yet. State and local tax information from the W-2 also won’t appear on the IRS transcript.4Internal Revenue Service. Topic No. 159 – How to Get a Wage and Income Transcript or Copy of Form W-2

Check the Social Security Earnings Record

The Social Security Administration keeps its own record of your reported earnings, which you can review through your my Social Security account online. Your Social Security Statement shows earnings history year by year, and you can flag errors if you find wages that don’t match your records.5Social Security Administration. Social Security Statement This is particularly useful if you suspect someone reported wages under your SSN for employment you never had.

Compare Against Pay Stubs and Bank Deposits

The final pay stub for the year should show year-to-date totals for gross wages, federal tax withheld, Social Security and Medicare taxes, and state taxes. These should closely match the corresponding W-2 boxes. Bank statements showing direct deposit amounts can provide additional confirmation. If the W-2 claims $80,000 in earnings but bank deposits and pay stubs add up to $50,000, the discrepancy speaks for itself.

How Lenders Verify W-2 Income

If you’re reviewing a W-2 as a lender, visual inspection and math checks catch the crude forgeries, but the definitive verification happens through the IRS itself.

Lenders use Form 4506-C to request tax transcripts through the IRS Income Verification Express Service (IVES). The borrower signs the form authorizing an approved IVES participant to receive their wage and income transcript directly from the IRS. Line 7 of the form specifically allows requesting W-2 data. The authorized participant faxes the completed form to the IRS, and the transcript comes back showing exactly what was reported, leaving no room for the borrower to alter figures in between.6Internal Revenue Service. Form 4506-C, IVES Request for Transcript of Tax Return

The form must be signed by the taxpayer and received by the IRS within 120 days of the signature date. If the transcript data doesn’t match the W-2 the borrower provided, you have your answer. IVES transcripts are subject to the same early-year availability delays as individual transcripts, so verification in January may require patience.

If a Fake W-2 Was Filed in Your Name

Sometimes the victim isn’t the one reviewing the W-2. You might discover a fake W-2 exists under your SSN when the IRS sends a notice saying you received income from an employer you’ve never heard of, or when your tax return gets rejected because one was already filed using your SSN.

If the IRS contacts you with Letter 5071C, Letter 4883C, or Letter 5747C asking you to verify your identity, follow the instructions in that letter rather than filing additional paperwork. The IRS uses those letters when it has already flagged a suspicious return and needs your confirmation.7Internal Revenue Service. When to File an Identity Theft Affidavit

If you haven’t received one of those letters but believe someone is using your personal information to report fake income, file Form 14039 (Identity Theft Affidavit) with the IRS. You should complete this form specifically when the IRS sends a notice indicating you received wages from an employer you never worked for. The form can be submitted online or printed and mailed.7Internal Revenue Service. When to File an Identity Theft Affidavit

After resolving the immediate issue, protect yourself going forward by enrolling in the IRS Identity Protection PIN program. An IP PIN is a six-digit number that blocks anyone from filing a federal tax return using your SSN without it. Anyone with an SSN or ITIN who can verify their identity is eligible. The fastest way to enroll is through your IRS Online Account, where you can choose continuous enrollment that carries forward every year or one-time enrollment for the current year only. If you can’t verify your identity online and your adjusted gross income is below $84,000 (or $168,000 for married filing jointly), you can apply by submitting Form 15227. Otherwise, you can visit a Taxpayer Assistance Center in person with identification documents.8Internal Revenue Service. Frequently Asked Questions About the Identity Protection Personal Identification Number (IP PIN)

Reporting a Fake W-2

Once you’ve confirmed a W-2 is fraudulent, report it. The IRS accepts reports of tax fraud, including fake or altered tax documents, through Form 3949-A (Information Referral), which can be submitted online through the IRS digital referral system.9Internal Revenue Service. Report Tax Fraud, a Scam or Law Violation Submission is voluntary and confidential.10Internal Revenue Service. IRM 3.28.2 – Information Referral Process for Form 3949-A

If the fake W-2 was used to obtain a loan, report it to the lender’s fraud department as well. Financial institutions that participate in the IVES program can independently verify the discrepancy, and most have internal fraud investigation teams that escalate these cases. For situations involving identity theft, file a report with local law enforcement and consider filing a complaint with the Federal Trade Commission at IdentityTheft.gov. For fraudulent state income tax documents, contact your state’s tax agency directly, since most maintain dedicated fraud reporting channels on their websites.