Fake IRS Refund Messages 2026: How to Spot a Tax Scam
The weeks after April 15 are peak season for IRS impersonators. Fraudsters know most Americans just filed and are expecting a refund or anxious about a balance due. The IRS’s 2026 “Dirty Dozen” leads with Employee Retention Credit promoter fraud, Fuel Tax Credit schemes, and social-media bad-tax-advice hoaxes. Here is how to identify a genuine IRS communication, the most active scam types, and what to do if you’ve already engaged a fraudulent message.
How to tell a genuine IRS message from a scam
- The IRS does not initiate contact via email, text message, or social media to request personal or financial information. This is the primary test. Any unsolicited email, text, or DM claiming to be from the IRS is fraudulent, full stop.
- The IRS makes first contact by US Postal Service mail in nearly all cases. Even if a call follows, the first notice arrives as a physical letter with a notice number and instructions for responding.
- The IRS’s only legitimate domain is irs.gov. Anything else — irs-refund.com, refund-irs.org, irs-gov.net — is fake. Check the full URL, not just the display text.
- The IRS will never demand payment in gift cards, cryptocurrency, or wire transfer. Legitimate options include check, IRS Direct Pay, EFTPS, and debit/credit card through approved processors.
- The IRS will never threaten immediate arrest, deportation, or law-enforcement action over an unpaid tax bill. You have the right to question or appeal any amount before collection proceeds.
- The IRS will never demand payment without giving you a chance to question or appeal. Every legitimate notice lists your rights explicitly.
Common 2026 scam patterns
SMS / text scams — “Where’s My Refund” spoofs
The IRS does not send refund-tracking links via text. Any SMS claiming your refund is ready or about to expire uses urgency as bait. The link leads to a look-alike domain designed to harvest your Social Security number, bank routing data, or login credentials. Delete it; check your real refund status at irs.gov/refunds.
Email and phishing
IRS phishing emails spoof the sender (e.g., “noreply@irs-gov.us”) while routing through unrelated servers. Common lures: fake 1099-G or W-2 attachments that install malware, fake “Confirm your refund” forms that capture banking details, and fake EFTPS login pages. The IRS never sends attachments to initiate contact and never asks you to confirm personal information via link.
Phone-call scams
Automated “IRS lawsuit — press 1” robocalls spoof caller ID to show “IRS” or “US Treasury.” Scripts claim your SSN is suspended, a warrant is out for your arrest, or back taxes are payable only by gift card. Real IRS revenue officers can call and visit — but they always identify themselves by name and badge number and never demand a single payment method on the spot.
Promoter and preparer fraud — 2026 Dirty Dozen highlights
Employee Retention Credit (ERC/ERTC) promoter scams top the 2026 Dirty Dozen. Promoters charge contingency fees to file ERC claims for businesses that don’t qualify, leaving employers liable for back taxes when the IRS rejects the claim. An IRS ERC Withdrawal Program is available for businesses misled into filing.
Fuel Tax Credit false claims — promoters pitch a “new Fuel Tax Credit statement” worth thousands. The credit applies only to specific off-highway business fuel uses and is not available to most individuals.
Social media bad-tax-advice schemes — posts promoting a “$32,000 Self Employment Tax Credit” instruct people to file fabricated Schedule H or SE entries. The IRS treats these as frivolous filings subject to a $5,000 civil penalty.
If any preparer promises an outsized refund, charges a contingency fee, or pressures urgency — walk away.
What the IRS will and won’t do
The IRS WILL: make first contact by USPS mail with a numbered notice; identify calling employees by name and badge number; offer multiple payment options; give you the right to appeal before collection.
The IRS WON’T: email, text, or DM you to request personal information; demand payment in gift cards, cryptocurrency, or wire transfer; threaten immediate arrest or deportation; request remote-desktop access.
Full official guidance: Recognize Tax Scams and Fraud.
If you’ve already clicked a link or shared details
- Do not reply or click further links.
- Forward suspicious emails or texts to phishing@irs.gov, then delete them.
- Report to the IRS via the official page: Report Fake IRS Emails and Messages
- Report to the FBI’s IC3 at ic3.gov for wire fraud or large-loss attempts.
- Report to the FTC at reportfraud.ftc.gov for identity theft tracking.
- Change passwords on your IRS Online Account, email, and banking. Enable two-factor authentication.
- If your SSN was exposed, file IRS Form 14039 (Identity Theft Affidavit) and place fraud alerts with Equifax, Experian, and TransUnion.
- Contact your bank immediately if you shared payment or account details.
Verify your real refund without trusting any message
Check your refund only via IRS Online Account (irs.gov/account) or the official “Where’s My Refund” tool at irs.gov/refunds — not via text, email, or third-party sites. For e-filed returns with direct deposit, the IRS typically issues refunds within 21 days. To confirm the expected amount before it arrives, use our refund estimator to run the numbers yourself.
Last verified 2026-05-01. IRS guidance for the 2026 filing season including current Dirty Dozen patterns.