The weeks after April 15 are peak season for IRS impersonators. Fraudsters know most Americans just filed and are expecting a refund or anxious about a balance due. The IRS’s 2026 “Dirty Dozen” (IR-2026-30, March 5, 2026) leads with IRS impersonation by email and text, followed by AI-enabled phone impersonation, fake charities and misleading tax advice on social media. Here is how to identify a genuine IRS communication, the most active scam types, and what to do if you’ve already engaged a fraudulent message.
How to tell a genuine IRS message from a scam
- A message that is unexpected, rushes you, threatens you, asks for personal or financial information or demands payment now is not from the IRS. A social media direct message is never from the IRS.
- The IRS normally makes first contact by US Postal Service mail. Even if a call follows, the first notice arrives as a physical letter with a notice number and instructions for responding.
- The IRS website is IRS.gov. Lookalikes such as irs-refund.com, refund-irs.org or irs-gov.net are fake. Check the full URL, not just the display text.
- Impersonators demand payment “now or else.” Pay the IRS only through the options listed on IRS.gov, such as IRS Direct Pay, EFTPS or a payment plan.
- The IRS will never threaten immediate arrest, deportation, or law-enforcement action over an unpaid tax bill. You have the right to question or appeal any amount before collection proceeds.
- The IRS will never demand payment without giving you a chance to question or appeal. Every legitimate notice lists your rights explicitly.
Common 2026 scam patterns
SMS / text scams — “Where’s My Refund” spoofs
Any SMS claiming your refund is ready or about to expire uses urgency as bait. The link leads to a look-alike domain designed to harvest your Social Security number, bank routing data, or login credentials. Delete it; check your real refund status at irs.gov/refunds.
Email and phishing
IRS phishing emails spoof the sender (e.g., “noreply@irs-gov.us”) while routing through unrelated servers. Common lures: fake 1099-G or W-2 attachments that install malware, fake “Confirm your refund” forms that capture banking details, and fake EFTPS login pages.
Phone-call scams
Automated “IRS lawsuit — press 1” robocalls spoof caller ID to show “IRS” or “US Treasury.” Scripts claim your SSN is suspended, a warrant is out for your arrest, or back taxes are payable only by gift card. Real IRS revenue officers can call and visit, but they carry an IRS-issued credential (pocket commission) and an HSPD-12 ID card with a serial number and photo, and they usually mail you first.
Promoter and preparer fraud — 2026 Dirty Dozen highlights
Abusive undistributed long-term capital gains claims (item 6) — the IRS reports an increase in overstated or fabricated Form 2439 claims, including claims tied to organizations that are not legitimate investment funds or real estate trusts. This item replaced last year’s fuel tax credit concerns on the list.
Bogus “Self-Employment Tax Credit” promotions (item 7) — social media and promoters push a broad “self-employment tax credit” that most people do not qualify for. The IRS is closely reviewing these claims, and filers claim them at their own risk.
Overstated withholding schemes (item 10) — scammers urge people to inflate withholding on made-up W-2 or 1099 data to manufacture a refund. The IRS may delay processing while it checks wages and withholding against third-party records.
Ghost preparers (item 8) — a preparer who will not sign your return or include a PTIN is a major red flag, and you remain legally responsible for what is filed.
If any preparer promises an outsized refund, charges a contingency fee, or pressures urgency — walk away.
What the IRS will and won’t do
The IRS WILL: make first contact by USPS mail with a numbered notice; show official IRS credentials when employees visit; offer multiple payment options; give you the right to appeal before collection.
The IRS WON’T: send you a social media DM; threaten arrest or deportation; demand payment “now or else” without letting you question or appeal the amount.
Full official guidance: Recognize Tax Scams and Fraud.
If you’ve already clicked a link or shared details
- Do not reply or click further links.
- Forward suspicious emails or texts to phishing@irs.gov, then delete them.
- Report to the IRS via the official page: Report Fake IRS Emails and Messages
- Report to the FBI’s IC3 at ic3.gov for wire fraud or large-loss attempts.
- Report to the FTC at reportfraud.ftc.gov for identity theft tracking.
- Change passwords on your IRS Online Account, email, and banking. Enable two-factor authentication.
- If your SSN was exposed, file IRS Form 14039 (Identity Theft Affidavit) and place fraud alerts with Equifax, Experian, and TransUnion.
- Contact your bank immediately if you shared payment or account details.
Verify your real refund without trusting any message
Check your refund only via IRS Online Account (irs.gov/account) or the official “Where’s My Refund” tool at irs.gov/refunds — not via text, email, or third-party sites. For e-filed returns with direct deposit, the IRS typically issues refunds within 21 days. To confirm the expected amount before it arrives, use our refund estimator to run the numbers yourself.
Last verified 2026-05-01. IRS guidance for the 2026 filing season including current Dirty Dozen patterns.