Blog

Fraudsters are posing as IRS representatives to steal Social Security numbers, bank account details, and even full refunds, using emails, text messages, and robocalls that appear legitimate.

These schemes are becoming more aggressive and sophisticated each year.

What IRS scams look like

Some of the most common tactics include:

• Emails claiming you’re eligible for a refund and asking you to click a link to ‘verify your information.’
• Text messages stating your IRS account is frozen unless you log in using a link.
• Voicemails warning of legal action, arrest, or asset seizure unless you pay ‘outstanding taxes’ immediately.
• Fake IRS websites that mimic the look and feel of the official IRS portal.
• Social media messages from fake IRS accounts offering to ‘help you resolve tax debt.’

These scams are not only persistent, they’re carefully crafted to fool even digitally savvy individuals. In many cases, they spoof real IRS phone numbers or use official-looking email domains.

Why people fall for these scams

Taxpayers are especially vulnerable if:

• They’re anticipating refund updates or tax return confirmation.
• They’ve recently moved, changed jobs, or switched accountants.
• They receive other legitimate IRS notices and find it hard to distinguish real from fake.
• They’re concerned about penalties or missing deadlines.

Scammers create urgency to cloud your judgment, but don’t let fear override your instincts.

Protect yourself with these 3 steps

1. Pause and assess the message

If you receive a message from ‘the IRS’ that seems suspicious or demands immediate action, don’t respond straight away. The IRS does not communicate with taxpayers in this manner.

2. Know what the IRS doesn’t do

The IRS will never:

• Contact you by email, text, or social media to ask for personal or financial information.
• Demand payment through gift cards, wire transfers, or cryptocurrency.
• Threaten to arrest you over unpaid taxes.
• Leave aggressive voicemails or send QR codes in messages.

All genuine communication from the IRS will be one of these methods: www.irs.gov/help/how-to-know-its-the-irs.

3. Report and take action

If you receive a suspicious message:

• Forward scam emails to phishing@irs.gov
• Report calls www.irs.gov/privacy-disclosure/report-phishing
• Notify us
• Contact your bank if you shared any financial details

By reporting these scams, you help IRS enforcement teams shut down fake websites and fraudulent phone numbers.

What to do if you’ve been scammed

If you’ve fallen for a scam or entered your details into a fraudulent website:

1. Contact your bank and credit card company immediately.
2. Place a fraud alert on your credit reports through Equifax, Experian, or TransUnion.
3. File an IRS Identity Theft Affidavit (Form 14039).
4. Report the scam at www.identitytheft.gov.

Acting quickly can stop scammers from doing more harm with your information.

Tips for business owners

If you run a business:

• Use multi-factor authentication for all IRS logins.
• Never click on links in emails claiming to be from the IRS.
• Monitor your IRS e-Services account for unauthorized access.
• Train staff to recognize phishing emails targeting payroll or W-2 data.

Many scammers target HR and finance departments to gain access to employee tax records, especially during the first quarter.

Closing message

Scammers rely on fear and confusion. When something doesn’t feel right, take a step back and confirm using trusted sources. You’re never in trouble for asking questions or delaying a response to double-check a message.

When in doubt, go directly to www.irs.gov, contact the IRS, or speak to your tax advisor. The safest taxpayer is an informed one.