IRS Scams: How to Spot Fake IRS Calls, Emails, and Texts

By J. Mesa

Every tax season, criminals pretend to be the Internal Revenue Service. They use email, phone calls, texts, and social media to trick taxpayers into handing over a Social Security number, bank details, or money. A victim faces identity theft or financial loss.

Here is how to recognize an IRS scam, what to do about it, and how to keep your tax information safe all year.

What is an IRS scam?

An IRS scam is any attempt to steal money or personal information by posing as the IRS or a tax professional. The most common forms are:

Phishing emails that link to fake IRS pages
Text messages about a refund or a problem with your return
Phone calls that threaten arrest or demand immediate payment
Fake letters that copy IRS notices
Social media messages offering help with refunds or credits
Fraudulent tax preparers who steal refunds or client data

How does the IRS contact taxpayers?

The IRS contacts most taxpayers first by a letter sent through the US Postal Service. The agency does not initiate contact by email, text message, or social media to ask for personal or financial information.

The IRS does make phone calls and visits in some situations, such as an overdue bill or an audit. Those follow letters you have already received.

What will the IRS never do?

Demand immediate payment by gift card, wire transfer, payment app, or cryptocurrency
Threaten to have you arrested or deported by local police
Ask for your card or bank details over the phone, by email, or by text
Demand payment without giving you the chance to question or appeal the amount
Send an email or text asking you to “verify” your identity through a link

Any message that does one of these is a scam.

How do I spot a fake IRS email or text?

It arrives without warning and mentions a refund, a penalty, or a locked account
It contains a link or an attachment
The sender’s address does not end in irs.gov
It pushes you to act within hours
It asks for your Social Security number, bank details, or login

Don’t reply, and don’t click anything.

How do I spot a fake IRS phone call?

Scam callers sound official. They give a badge number, know part of your Social Security number, and show “IRS” on the caller ID, which criminals can fake. They then threaten arrest or a lawsuit unless you pay right now.

Hang up. If you think you owe taxes, call the IRS yourself at 1-800-829-1040, or check your account at IRS.gov.

How do I report an IRS scam?

Email: forward it to [email protected], then delete it.
Text: forward the message to [email protected] with the number it came from.
Phone call: report it to the Treasury Inspector General for Tax Administration at tigta.gov and to the Federal Trade Commission at reportfraud.ftc.gov.

Reporting helps the IRS shut down fake sites and warn other taxpayers.

What is an Identity Protection PIN, and should I get one?

An Identity Protection PIN (IP PIN) is a six-digit number the IRS issues to you each year. Nobody can file a tax return with your Social Security number without it.

Any taxpayer who can verify their identity can request one at IRS.gov. It is free, and it is the strongest protection against someone filing a fraudulent return in your name.

How do I verify a request for information?

Be careful any time someone asks for personal details. The IRS does not ask for your Social Security number or bank details by email. If you are unsure whether a request is real, contact the IRS directly at 1-800-829-1040, or log in to your account at IRS.gov. Don’t use the phone number or link in the message.

How do I protect my tax information?

Use strong, unique passwords for your tax software, your IRS online account, and your email
Turn on multi-factor authentication wherever it is offered
File early. A criminal can’t file a fraudulent return after yours is accepted.
Use a secure network. Don’t file taxes on public Wi-Fi.
Keep your devices updated

How do I choose a tax preparer I can trust?

Give your tax information only to trusted sources, such as a qualified tax preparer or financial advisor.

Check that the preparer has a Preparer Tax Identification Number (PTIN). Paid preparers must have one and must sign your return.
Ask how they store and send your documents
Avoid preparers who base their fee on the size of your refund
Never sign a blank return
Make sure your refund goes to your account, not theirs

How do I dispose of tax documents?

Shred any paper that carries sensitive information, including old tax returns, W-2s, and 1099s, once you no longer need to keep it. The IRS suggests keeping returns and supporting records for at least three years in most cases. Erase old computers and drives before you recycle them.

Is tax software safe?

Reputable tax preparation software files your return electronically over an encrypted connection, and e-filing is safer than mailing paper. Download the software from the company’s own website, use a strong password, and turn on multi-factor authentication.

What should I do if I gave information to a scammer?

If you sent money, call your bank or card issuer right away.
Change the passwords on your email and financial accounts.
Place a fraud alert or a credit freeze with Equifax, Experian, and TransUnion.
Report identity theft at IdentityTheft.gov for a recovery plan.
Request an IP PIN from the IRS.
If someone filed a return in your name, the IRS will ask you to complete Form 14039, the Identity Theft Affidavit.

How do tax scams target small businesses?

Criminals target payroll and human resources staff.

W-2 scams. An email that appears to come from the owner asks for copies of all employee W-2 forms.
Fake payroll changes. A message asks to change an employee’s direct deposit account.
Fake IRS notices about business tax accounts or new “registration” fees.

Protect your business with one rule: confirm any request for employee tax data or a payment change by phone, using a number you already have. If you prepare taxes for others, federal law requires you to have a written information security plan.

When do tax scams peak?

Scams rise from January through April and again around extension deadlines in the fall. They also follow the news. New credits, relief payments, and disaster declarations each bring a wave of fake messages. Stay alert all year.

Your next step

Request an IP PIN at IRS.gov before you file this year. Protecting yourself from IRS impersonators takes attention and a commitment to guarding your personal information. If your business handles employee tax or payroll data, Cerberus Cybersecurity can train your team to spot these scams. Contact us about our cybersecurity training.