by Updated November 1, 2026: IRS impersonation scams now span texts, emails, fake websites and AI-assisted calls. Here’s how U.S. taxpayers can identify red flags, verify contacts and report fraud.
Why IRS scams are a serious concern in 2026
A text says your tax refund is waiting. An email claims your IRS account will be suspended. A caller sounds official and warns that you must pay immediately. Each message is designed to make you act before you verify it. In its 2026 Dirty Dozen tax-scam warning, the Internal Revenue Service (IRS) specifically highlighted phishing emails and texts, AI-enabled impersonation calls, identity theft, and misleading tax advice shared on social media.
The good news: you do not need to be a cybersecurity expert to recognize many warning signs. This guide explains the most common tactics, what real IRS communication looks like, and exactly how to report suspicious contact.
Quick answer: Is that IRS text, email or phone call real?
Treat an unexpected IRS-related message as suspicious if it pressures you to act immediately, asks for sensitive information, demands payment, or sends you to a website through an unfamiliar link. Do not use the contact details or links in the message. Instead, type IRS.gov into your browser yourself and check your IRS Online Account or official IRS contact information.
1. Fake IRS text messages (smishing)
Smishing is phishing delivered by SMS or another messaging service. Scammers may claim that you have an unclaimed refund, an overdue tax balance, an account-verification problem, or an urgent identity check. Some messages include a QR code instead of a conventional link. Both can lead to look-alike websites designed to steal personal details.
Common warning signs
- An unexpected refund or payment alert; a demand to verify your Social Security number or bank details; a shortened or misspelled web address; a countdown or threat of penalties; or a request to scan a QR code to unlock a refund.
The IRS says it sends text messages only when you have opted in. A text claiming to be the IRS is not automatically fraudulent, but unsolicited links and demands for sensitive data are strong reasons to stop and verify independently.
2. Phishing emails that imitate IRS notices
A fake IRS email may use a convincing layout, a tax-themed attachment, and an official-looking sender name. Attackers can disguise the sender display name, so seeing “IRS” in your inbox is not proof of authenticity. A message might urge you to download a document, review a supposed tax adjustment, or submit personal details to prevent an account lockout.
Do not open unexpected attachments or follow the message’s links. The IRS warns that these can lead to malicious software, including ransomware. If you opted into legitimate IRS email notifications, verify any requested action by going directly to IRS.gov rather than following an unexpected message.
3. AI-generated IRS phone calls and caller-ID spoofing
The IRS’s 2026 scam warnings include calls using AI-generated audio, voice mimicry, robocalls and spoofed caller IDs. A convincing voice or familiar-looking number does not establish that a call is legitimate.
Fraudulent callers may demand immediate payment, threaten arrest, or insist you must stay on the phone. The IRS generally makes first contact by U.S. mail and does not call to demand immediate payment or threaten arrest. Some legitimate IRS or authorized collection calls do occur, so the safest response to an unexpected call is to hang up and verify the matter using official channels.
4. Fake IRS websites and account-access scams
Scammers often create pages that resemble official government portals. They may ask for your Social Security number, tax filing information, password, or financial details. Never assume a page is legitimate because it has a government-style design or a padlock icon. For IRS account services, navigate directly to https://www.irs.gov and follow the official links.
Use a unique password and multifactor authentication where available. Avoid letting a stranger “help” you create an IRS Online Account in exchange for access to your personal documents.
5. Misleading tax advice and bogus refund promises
Not every tax scam begins with a fake IRS message. The 2026 Dirty Dozen also warns about viral social-media tax “hacks,” exaggerated refund claims, ghost tax preparers, fake charities, and misleading offers to settle tax debt. A promise of a guaranteed large refund is not a substitute for checking eligibility under actual tax rules.
Before acting on tax advice, consult IRS instructions or a qualified tax professional. Avoid preparers who refuse to sign a return or provide a required Preparer Tax Identification Number (PTIN). You remain responsible for information filed in your name.
How to report a fake IRS email or text
- 1. Do not reply, click links, scan QR codes, or open attachments.
- 2. For suspicious IRS-related email, send the original message to phishing@irs.gov, preferably as an attachment with its headers. Follow the IRS’s current reporting instructions.
- 3. For a suspicious text, email phishing@irs.gov with the subject “Text” and include the sender number, message content, recipient number, and date, time and time zone received. You can also forward the text to 7726 (SPAM).
- 4. For a suspicious call, hang up. The IRS directs people to report impersonation calls to the Treasury Inspector General for Tax Administration (TIGTA), including its hotline at 800-366-4484.
- 5. For suspected tax fraud or broader scam activity, use the IRS’s official reporting portal at IRS.gov/SubmitATip.
What if you already clicked or shared information?
Act promptly. Stop interacting with the message, do not enter more information, and go to the official IRS identity-theft guidance at IRS.gov/idtheft. If you shared an account password, change it from a trusted device and enable multifactor authentication. If financial details or money were involved, contact your bank or card issuer immediately. Monitor your accounts and follow the IRS’s identity-theft recovery steps appropriate to your situation.
A simple IRS scam-prevention checklist
- Type IRS.gov into your browser instead of trusting message links.
- Be suspicious of urgent threats, payment demands, or requests for sensitive data.
- Never rely on caller ID or a realistic voice alone.
- Keep your phone, browser and security software updated.
- Use unique passwords and multifactor authentication.
- Store tax documents securely and avoid accessing sensitive accounts on public Wi-Fi.
- Check tax advice against official IRS instructions before filing.
Frequently asked questions
Does the IRS send text messages in 2026?
Yes, but generally only when taxpayers opt in. An unexpected text asking you to click a link or provide sensitive information should be treated as suspicious and verified through IRS.gov.
Will the IRS call me about unpaid taxes?
The IRS and authorized private collection agencies may call about account matters. However, the IRS generally contacts taxpayers by mail first and does not call to demand immediate payment or threaten arrest.
Where do I send a suspicious IRS email?
Use phishing@irs.gov and follow the official IRS instructions for forwarding the original message, preferably with headers intact.
Can scammers use AI to sound like IRS agents?
Yes. The IRS explicitly highlighted AI-enabled impersonation, voice mimicry and caller-ID spoofing in its 2026 Dirty Dozen warning. Verify independently, regardless of how convincing the caller sounds.
What should I do if my tax identity may have been stolen?
Start at IRS.gov/idtheft for official identity-theft steps. If you also shared bank information or paid a scammer, contact the relevant financial institution promptly.
Bottom line
The safest response to an unexpected IRS-related message is simple: stop, verify through IRS.gov, and report suspicious contact. Scammers exploit urgency, but a few minutes of independent checking can protect your identity, tax records and money.
Official sources and further reading
- IRS: 2026 Dirty Dozen tax scams
- IRS: Report fake IRS messages
- IRS: How to know it’s the IRS
- IRS: Cybersecurity Awareness Month guidance (October 2026)
- IRS: Identity Theft Central
Updated November 2026. This article provides general consumer-safety information, not individualized tax or legal advice.
