Most Common Fake IRS Scams & How to Avoid Them
Fake IRS texts, calls, emails and letters try to steal your money and personal data. Learn the latest tricks, the red flags to spot, and what to do next.
Table of Contents
Quick Facts
About this scam type
IRS scam messages impersonate the Internal Revenue Service to frighten, pressure, or mislead taxpayers into giving up payments or sensitive information. Criminals use a mix of text messages, emails, phone calls, social media messages, and fake letters to trick victims into providing personal data or sending money. The real IRS never initiates contact about sensitive issues using email, text, or social media.
How scammers contact victims
Scammers commonly use SMS and email to pose as the IRS, sending deceptive messages about refunds, credits, or account verification. They also exploit phone calls with caller ID spoofing, social media DMs, and counterfeit letters. These channels are effective because they are unexpected, seemingly urgent, and appear somewhat official to the recipient.
Who is most at risk
Older adults and recent immigrants are often targeted because they may be less familiar with how official tax communications work, feel vulnerable to authority threats, or face language barriers. Fear of enforcement and urgent-sounding demands can cause panic, making them susceptible to these advanced impostor tactics.
Understanding the risk level
Victims of fake IRS scams risk losing thousands of dollars to fraudulent payments and exposing sensitive information that may be used for identity theft and fake tax returns. The consequences can be long-term and severe, disrupting finances and credit, and causing repeated victimization in future tax seasons.
Most Common IRS Scams
How it works: You receive an unsolicited text from someone pretending to be the IRS, with a link to fix a refund error or claim a new credit. The link leads to a fake IRS web page that installs malware or steals your Social Security number, bank details, or login credentials. The IRS has reported recent waves of smishing texts mentioning refunds, credits, or stimulus payments.
We cheked an error… amounting to $927,22… create a E‑Refund… click below to claim your tax refund. Sender name like “govirs-accnnt2023,” claiming your return was “ban‑by the IRS.” Red Flag Signs:
- • Any IRS link that is not on IRS.gov or directfile.irs.gov.
- • Typos, odd punctuation or euro-style currency formats.
- • Urgent 24 to 72 hour deadlines to click a link.
- • Requests for full SSN, bank login, or photos of ID via text.
How it works: You receive a phone call with 'IRS' showing on your caller ID. The caller claims you owe back taxes, then demands immediate payment by gift cards, wire, cryptocurrency, or a prepaid debit card. They may threaten arrest or deportation if you do not comply. The real IRS never demands a particular payment method or threatens arrest.
You must pay today or local police will arrest you. Stay on the phone while you buy gift cards, then read me the codes. Red Flag Signs:
- • Demands for iTunes, prepaid or wire payments.
- • Refusal to mail an official notice first.
- • Threats of arrest, deportation or license revocation.
How it works: A letter arrives in the mail with IRS logos, asking you to email photos of your driver’s license, bank details, and Social Security number to release a refund. In 2025, a variant asked for 'A Clear Phone of Your Driver’s License… All Four (4) Angles.' These letters use real-sounding instructions but do not match any notice in your IRS Online Account.
Red Flag Signs:
- • Requests to email photos of ID or provide bank routing info.
- • Awkward phrasing, capitalization, or odd formatting.
- • Return email addresses that are not irs.gov.
- • No matching copy of notice in your IRS Online Account.
How it works: A scammer offers to help you set up your IRS Online Account or get an Identity Protection PIN, claiming to make things easier for you. After collecting your personal and login information, they can file fake tax returns or steal your identity. According to the IRS, no outside help is needed — only you should create your IRS account or IP PIN.
Red Flag Signs:
- • Anyone asking for your photo ID, SSN or IP PIN to “set up” your account.
- • Requests to share one-time codes or MFA codes.
- • Offers to handle your IRS login for you.
How it works: Phishing emails urge you to use “Direct File” at non‑IRS domains such as direct-file-irs[.]com. The real free service for eligible taxpayers is at directfile.irs.gov. Fake sites may steal information or require payment.
Red Flag Signs:
- • Any Direct File link not on directfile.irs.gov.
- • Requests for upfront fees or card numbers.
- • Support email or chat that is not hosted by IRS.
How it works: A caller claims to be from a collection agency working for the IRS and demands payment. Real private collectors only get involved after you have received letter CP40, and they use a matching authentication number. Scammers often try to collect payment directly and refuse to validate the debt.
Red Flag Signs:
- • No prior letter and no CP40 in your IRS Online Account.
- • Request for payment to any name other than U.S. Treasury.
- • Pressure tactics and refusal to validate the debt.
Red Flags & Warning Signs
Top 5 Phrases Scammers Use
- 1 "Click to claim your refund now."
Pushes you to click a malicious link urgently, leading to identity theft or malware.
- 2 "Final notice, pay today or you will be arrested."
Creates extreme urgency and fear of legal action to rush payment without thinking.
- 3 "Verify your identity to unlock your refund."
Tricks you into sharing sensitive information by pretending it is needed for your benefit.
- 4 "Your federal return was ban‑by the IRS."
Presents a confusing or alarming claim in strange wording to make you panic.
- 5 "We can set up your IRS account for you."
Lures you with helpful-sounding offers to gain access to your accounts and personal information.
Scam Warning Signs
- Non‑IRS domains like irs.com or shortened links.The IRS only uses official websites ending in .gov.
- Requests for gift cards, wire transfer or crypto.IRS payments are made only to U.S. Treasury via approved options.
- Typos, odd capitalization, euro-style commas in dollar amounts.Scam messages often contain spelling or formatting errors.
- Refusal to mail an official notice first or to let you appeal.The IRS always sends official letters and gives you a chance to ask questions or appeal.
- Pressure to keep the call secret or to stay on the line at stores.Scammers try to isolate you and prevent you from verifying the story.
Legitimate Communications
- First contact is usually by U.S. mail and can be verified in your IRS Online Account.You can check recent IRS notices online and match them to letters received.
- The IRS does not threaten arrest or immigration action and allows you to question or appeal.Legitimate agents will not use fear tactics or block your rights.
- Payments are made to U.S. Treasury via listed options on IRS.gov.IRS agents do not request unusual payment methods or direct payment to another name.
- Agents show two forms of ID and you can verify IRS-CI special agents via the Employee Verification Tool.Legitimate representatives are transparent with identification.
- IRS links are on IRS.gov, and text or email is used only with your prior permission.Official communications are always verifiable by you.
How to Protect Yourself
- 1. Do not click links or open attachments in unsolicited IRS messages.
Forward suspicious emails to phishing@irs.gov and texts to 7726. Save screenshots and sender information for reports.
- 2. Verify any letter, call or email through IRS.gov.
Sign in to your IRS Online Account to check for the same notice, view balances, and confirm any contact. If unsure, call a number listed on IRS.gov, not the one in the message.
- 3. Get an Identity Protection PIN for every eligible family member.
An IP PIN is a six-digit number that blocks others from e-filing a return in your name. You can get one through your IRS Online Account or by filing Form 15227 if you meet requirements.
- 4. Lock down your logins.
Use strong passwords, enable multi-factor authentication wherever offered, and never share one-time codes. No legitimate IRS helper will need these codes.
- 5. Know how the IRS really takes payments.
The IRS never demands payment by gift card, wire or cryptocurrency. Always review official payment options at IRS.gov/payments before sending money to anyone.
- 6. Be cautious with 'private collector' calls.
You should have received a CP40 letter first, and any authentication number must match. Otherwise, hang up and contact the IRS directly.
- 7. Share these tips with older relatives.
Sit together to review scam examples, and set a rule that family members should call you before acting on any unexpected IRS message.
Add 'Trusted Contacts' in your phone so unknown calls from 'IRS' stand out.
Take charge of your digital safety with Lifeguard. Sign up for real-time scam monitoring and identity protection for your entire family.
What to Do If You're a Victim
If you suspect you responded to a fake IRS message or sent money to scammers, fast action can reduce the damage. Recovery is possible — follow these steps and reach out for help.
- 1. Stop contact and preserve evidence. (Do immediately)
Take screenshots of suspicious messages, caller ID screens, emails, and fake websites. Do not reply further.
- 2. If you paid, contact the payment provider now. (Do immediately)
If you sent gift cards, call the card issuer immediately. For bank, credit card, or wire payments, contact your bank to try reversing or freezing transactions.
- 3. Report the scam. (Do immediately)
Forward scam emails to phishing@irs.gov and texts to 7726. File a report with TIGTA online or by phone at 1-800-366-4484, and at ReportFraud.ftc.gov. If you lost money online, file at IC3.gov.
- 4. Secure your IRS and financial accounts. (Within 24 hours)
Change your IRS Online Account password, enable multi-factor authentication, and monitor your tax transcript and account balance for changes.
- 5. Place a free fraud alert and consider a credit freeze. (Within 24 hours)
Contact Equifax, Experian, and TransUnion to add a fraud alert, and consider freezing your credit to block new accounts.
- 6. Get or renew your IRS IP PIN. (Within 24 hours)
Apply for or update your Identity Protection PIN through your IRS account to prevent fraudulent tax filings.
- 7. If a false return was filed or SSN exposed, take next steps. (Within 1 week)
Go to IdentityTheft.gov to create a recovery plan and file IRS Form 14039 Identity Theft Affidavit as directed. Call the number on any IRS notice received or if unresolved, the IRS Identity Protection Specialized Unit at 800-908-4490.
For official resources, visit IRS.gov, IdentityTheft.gov, and ReportFraud.ftc.gov. The Treasury Inspector General for Tax Administration (TIGTA) can be reached at 1-800-366-4484.
Frequently Asked Questions
The IRS generally contacts you by U.S. mail. You can verify any notices inside your IRS Online Account. Phone calls may happen after a letter, and in-person visits are rare and limited.
Only if you gave prior permission, and never to request sensitive data or payment. Unsolicited messages asking for Social Security, bank info or one-time codes are scams.
An IP PIN is a 6-digit number that prevents someone from e-filing a return as you. Anyone with an SSN or ITIN who can verify their identity can get one. It is strongly recommended for identity theft victims and families.
Disconnect from the site, run security scans, change your IRS and email passwords, enable multi-factor authentication, and file reports to phishing@irs.gov, TIGTA and the FTC. Consider a credit freeze.
Ask to see two forms of ID. For IRS-CI special agents, use the Employee Verification Tool. When in doubt, end the meeting and contact the IRS using numbers on IRS.gov.
The official Direct File service is free at directfile.irs.gov for eligible taxpayers. Any other site or request for fees is a scam.
Only after you receive a CP40 letter. The collector must provide the same Taxpayer Authentication Number. If this is missing or does not match, hang up and contact the IRS.
Forward scam emails to phishing@irs.gov, texts to 7726, call TIGTA at 1-800-366-4484, or file online at ReportFraud.ftc.gov. For money losses online, report to IC3.gov.
Older adults and recent immigrants experience higher-dollar losses due to urgency and fear tactics, but anyone can be targeted, especially during filing season.
Keep Your Family Safe from IRS Scams
Fake IRS texts, calls, and emails can cost loved ones thousands. Lifeguard’s 24/7 protection helps spot scams and block identity theft before it starts. Take action today.
Start Family Protection