Companies

IRS scams: how the fake messages work

IRS scams involve fraudulent emails, text messages, phone calls, and letters falsely claiming to be from the Internal Revenue Service to steal taxpayers' money, Social Security numbers, or banking credentials. Scammers typically use aggressive threats of arrest, audits, or immediate tax debt collection, or dangle false promises of oversized refunds and tax credits.

Last reviewed: August 9, 2026 · Drafted with AI assistance. Every figure on this page was checked against the source cited for it. Not yet reviewed by a human editor.

ScamPreventionGuide is an independent consumer-protection resource. We are not affiliated with, endorsed by, or sponsored by the IRS. Company names and trademarks are the property of their respective owners and are used here only to identify the companies that scammers impersonate.

Is the IRS message real?

How the brand actually contacts customers: The IRS never initiates contact with taxpayers by email, text messages, social media channels, or phone calls to request personal or financial information, demand immediate payment using prepaid debit cards, gift cards, wire transfers, or cryptocurrency, nor does it threaten immediate arrest or local police intervention. Official contact is primarily initiated via physical mail delivered by the United States Postal Service (USPS) through official notices (CP notices or letters).

According to Federal Trade Commission (FTC) data published in June 2026, consumers reported losing a staggering $3.5 billion to imposter scams in 2025, with reported losses increasing nearly three times since 2020.. Source: Report fraud, Internal Revenue Service, https://www.irs.gov/help/report-fraud(https://www.irs.gov/help/report-fraud), Ju.

Which versions are in circulation?

The versions in circulation, and what each one is after:

Version	How it reaches you	What it wants
IRS Refund Pending Phishing SMS	SMS	Personal PII, bank account details, SSN, credit card info
Urgent Tax Debt Arrest Threat Call	Phone	Immediate cash payment via gift cards, wire transfer, cryptocurrency, or prepaid debit card
Fake "Latest Tax Summary" Email	Email	Login credentials, SSN, banking info, and remote desktop access to harvest data
Social Media Self-Employment Tax Credit Mill	Social	Upfront filing fees, fake W-2 preparation fees, and stolen SSN for fraudulent tax returns
Physical Delivery Service Unclaimed Refund Notice	Post	Photos of driver's license, bank routing numbers, and processing fees
Employee Retention Credit (ERC) Mill Scam	Email / Web	Massive upfront contingency fees and severe IRS compliance audit risks

How can you tell a real message from a fake one?

The differences you can check yourself:

The genuine IRS never demands immediate payment over the phone, via gift cards, wire transfers, prepaid cards, or cryptocurrency, nor does it refuse to allow a taxpayer to question or appeal the amount owed.
Fake IRS callers threaten local police arrest, jail time, or license revocation; real federal tax agents do not call or text threats of immediate law enforcement intervention.
The IRS initiates contact regarding tax liabilities exclusively via physical letters sent through the United States Postal Service (USPS), never via unsolicited text messages, mobile app DMs, or personal email accounts.
Fake IRS portals use web domains ending in .com, .net, .org, or hyphenated variations instead of the mandatory official federal domain ending strictly in .gov.
Social media schemes promoting secret credits (such as fake self-employment or fuel tax credits) require lying on Form 1040; genuine tax credits have strict statutory eligibility rules verifiable on IRS.gov.

What should you do in the first hour?

It depends on how far it got. Find your situation:

Track ① (Contacted / Phishing link clicked, but gave no data or money): Disconnect device from internet immediately, clear browser cache, forward suspicious text messages to 7726 (SPAM) and emails to phishing@irs.gov, and report the incident to the Federal Trade Commission at https://reportfraud.ftc.gov.
Track ② (Gave personal information / SSN / login credentials): Immediately place a free credit freeze on all major credit bureaus (Equifax, Experian, TransUnion), visit IRS Identity Theft Central to file an IRS Identity Theft Affidavit (Form 14039), and report identity theft to the Federal Trade Commission at https://identitytheft.gov.
Contact your bank, credit card issuer, or payment provider immediately to report fraudulent charges and request a recall or stop-payment order. File a formal cybercrime complaint with the FBI Internet Crime Complaint Center (IC3) at https://www.ic3.gov and local police department.
Disconnect computer from Wi-Fi/Ethernet network instantly, run a comprehensive offline malware scan using reputable security software, change all online banking and email passwords from an uncompromised secondary device, and monitor financial accounts for unauthorized activity.

Where do you report it?

Official reporting channel (URL, email, or phone): https://www.irs.gov/help/report-fraud (Online reporting tools at IRS.gov/SubmitATip; phishing/email reports to phishing@irs.gov; text messages forwarded to 7726 and reported to FTC).

Whatever the brand, two official channels take the report. File with the US Federal Trade Commission at reportfraud.ftc.gov, and — if money was lost or a computer was accessed — with the FBI's Internet Crime Complaint Center at ic3.gov. Reporting rarely recovers money on its own; it is what makes the next person's warning possible.