Please follow https://www.irs.gov/newsroom/employers-should-be-aware-of-w-2-scam-protect-employee-information.