How to Verify an IRS Notice Is Legitimate and Not a Scam

Quick reality check

When you get a message that looks like it’s from the IRS, don’t panic or act immediately. Scammers use fear and urgency to trick people into sending money or giving up Social Security numbers, bank details, or passwords. The real IRS usually begins contact by mail and includes specific notice numbers and account details. This guide gives a step‑by‑step verification checklist, reporting instructions, and practical examples I’ve seen in practice.

Why verification matters

A legitimate IRS notice can require a timely response—often 30 days—or it can trigger collection steps. A fraudulent notice can lead to identity theft, financial loss, or unnecessary panic. In my 15+ years helping taxpayers, I’ve seen clients who almost paid scammers by phone and those who delayed action on real notices because they thought the letter was fake. Verifying first protects both your money and your tax record.

Five-step checklist to verify any IRS notice

1. Pause and examine the delivery method

• The IRS usually initiates contact by U.S. mail (paper). If you get an unsolicited email, text message, or social media message asking for personal or financial information, treat it as suspicious. The IRS states it will not initiate contact with taxpayers by email, text messages, or social media to request personal or financial information (IRS.gov).
• The IRS will sometimes call taxpayers, but usually only after sending a letter. Even if you get a call, the IRS should already have sent a notice about the same issue.

1. Check for basic identifiers and notice details

• Look for your full name, current address, and a tax period (tax year) referenced on the notice. Scams often use generic greetings (“Dear taxpayer”) and lack specific tax-year references.
• Find the notice or letter number (for example: CP2000, CP14, Letter 3219B). The IRS publishes descriptions of common notice/letter codes. Match the code on IRS.gov to confirm the type of notice and typical next steps (see IRS Notice and Letter Codes page: https://www.irs.gov).

1. Don’t click links or call numbers provided in suspicious messages

• If you received an email or text, do not click links or open attachments. Scammers install malware or harvest credentials that way.
• For phone calls or numbers on a paper notice, it’s safer to verify the phone number on IRS.gov and call back using the number listed there or contact the IRS through your online tax account. Avoid using phone numbers from suspicious emails, texts, or unknown callers.

1. Confirm amounts and payment methods

• The IRS will never demand immediate payment via gift card, prepaid debit card, cryptocurrency, or wire transfer. Scammers push these payment methods because they are hard to reverse. If a caller demands those payment types, it’s a scam. (Consumer Financial Protection Bureau and IRS alerts reiterate this.)
• For legitimate payments, the IRS offers Direct Pay, Electronic Federal Tax Payment System (EFTPS), credit/debit card processing, or check/money order with clear instructions (see IRS Payment Options page: https://www.irs.gov/payments).

1. Validate via your IRS online account or official channels

• Check your tax account at IRS.gov to see recent notices or amounts owed. If you can’t access an online account, call the IRS using the official phone numbers listed on IRS.gov.
• Report suspicious emails to phishing@irs.gov and forward scam text message screen shots to the Treasury Inspector General for Tax Administration (TIGTA) or use online complaint tools at TIGTA and the FTC. If you believe you are the victim of identity theft, follow IRS identity-theft guidance immediately (IRS Identity Theft pages).

Useful, verifiable signs a notice is legitimate

• A specific notice/letter number and a clear tax year are listed.
• The notice contains a notice ID and an IRS mailing address.
• It references a transaction or return that matches your records (e.g., wages, credits).
• It gives specific options and timelines to respond (often 30 days) and explains appeal rights.

Red flags that often indicate a scam

• Demands for immediate payment using gift cards, cryptocurrency, or wire transfers.
• Threats of arrest, deportation, or license revocation for failure to pay right away.
• Caller claims they’re from the IRS but the caller ID is spoofed or the caller refuses to provide identifying information.
• Poor grammar, spelling mistakes, or odd formatting in an email or letter.
• Messages asking for passwords, PINs, or bank account login details.

Real-world examples from practice

• Example 1: A client received a text message claiming they were due a refund but needed to confirm their bank account by clicking a link. We treated it as phishing, and the link led to a site designed to steal banking credentials. I advised them to delete it and check their IRS online account; the IRS had not sent any notice.
• Example 2: A small business owner got an official-looking letter demanding payroll tax remittance. The notice included a CP2000 code and referenced specific payroll periods. We verified the code on IRS.gov and then called the IRS using the number on the agency’s website to confirm the amount. It was legitimate, and we arranged a payment plan.

Steps to take if you suspect a scam

1. Do not respond, call back, or click links.
2. Save the message, take screenshots of texts and emails, and note any caller ID information.
3. Report phishing emails to phishing@irs.gov and forward suspicious emails as attachments to that address. File complaints with TIGTA (https://www.tigta.gov) and the FTC (https://reportfraud.ftc.gov).
4. If you shared financial information or paid money, contact your bank or card issuer immediately and consider a fraud alert or credit freeze with the three major credit bureaus.
5. If you think you’ve been a victim of tax-related identity theft, follow the IRS identity theft report procedures and complete Form 14039 if required (IRS Identity Theft Central).

Timing and response: don’t ignore legitimate notices

Many IRS notices include a deadline—commonly 30 days—to respond or appeal. Ignoring a legitimate notice can lead to additional penalties or enforcement actions like levies. If you’re unsure, take immediate verifying steps (see our guide on what to do within 30 days of an IRS notice for an action checklist).

Internal resources: see our guides on:

• What to do within 30 days of any IRS notice (https://finhelp.io/glossary/what-to-do-within-30-days-of-any-irs-notice/)
• How to verify the authenticity of an IRS notice (https://finhelp.io/glossary/how-to-verify-the-authenticity-of-an-irs-notice/)
• Common mistakes on IRS notices and how to correct them (https://finhelp.io/glossary/common-mistakes-on-irs-notices-and-how-to-correct-them/)

Common mistakes taxpayers make

• Assuming phone calls are scams and ignoring legitimate collection calls (verify first via IRS.gov).
• Clicking suspicious links instead of checking your official IRS account.
• Paying a scammer immediately without documenting the correspondence.
• Failing to keep copies of notices and any responses — documentation helps if you must prove identity theft or appeal an IRS decision.

Frequently asked questions

Q: Can the IRS call me and demand payment?
A: The IRS can call taxpayers about tax debts but typically only after sending written notices. The IRS will not insist on payment via gift cards, cryptocurrency, or prepaid debit cards. Verify any call by checking IRS.gov and by confirming you have received the related written notice first. (IRS.gov)

Q: I received an email with an attachment. Is that from the IRS?
A: Almost always a red flag. The IRS rarely sends unsolicited emails with attachments asking for personal information. If in doubt, do not open the attachment and forward the email to phishing@irs.gov.

Q: What if I already gave information to someone claiming to be the IRS?
A: Contact your bank and credit card companies immediately, report the incident to TIGTA and the FTC, and consider a credit freeze or fraud alert. If you disclosed your Social Security number and suspect identity theft, follow IRS procedures for identity-theft victims.

Reporting and recovery contacts (authoritative links)

• IRS — Report phishing and suspicious contacts: https://www.irs.gov/privacy-disclosure/report-phishing
• TIGTA — Report IRS-related fraud or scams: https://www.tigta.gov
• FTC — Report fraud and identity theft: https://reportfraud.ftc.gov
• CFPB — Consumer advice on scams and payments: https://www.consumerfinance.gov

Final professional tips

• Keep a personal file of every IRS notice and your response. In disputes, documentation is your strongest evidence.
• Use secure payment channels listed on IRS.gov when paying taxes—never via gift card or cryptocurrency to an individual.
• When in doubt, call the IRS using phone numbers from IRS.gov or consult a qualified tax professional. In my practice, a five-minute verification call to the IRS or a tax advisor has prevented costly mistakes more than once.

Disclaimer

This article is educational only and does not constitute legal, tax, or financial advice. For guidance tailored to your situation, contact a licensed tax professional or the IRS directly.