How to Detect IRS Scams: Spotting Fraudulent Tax Communications

Scammers impersonate the IRS year-round, not just during tax season. Their goal is either to steal money directly (through fake-demand payments) or to harvest personally identifiable information (PII) used later for tax refund fraud or identity theft. The IRS, FTC and CFPB all publish alerts about common scams and the signs to watch for (IRS: https://www.irs.gov/newsroom/tax-scams-consumer-alerts; FTC: https://reportfraud.ftc.gov/; CFPB: https://www.consumerfinance.gov/consumer-tools/identity-theft/).

In my practice as a financial educator working with individuals and small businesses, I regularly see common patterns: urgent language, threats of arrest or liens, requests for unconventional payments (gift cards, cryptocurrency, wire transfers), and pressure to provide Social Security numbers or bank account details immediately. Those are red flags that a communication is not legitimate.

Below I walk through how official IRS communications differ from scams, practical verification steps, what to do if you’re targeted or victimized, and resources to report and recover.

How official IRS notices usually work

  • The IRS typically initiates contact by mail (U.S. Postal Service), not by phone, email, or text, when it needs to resolve a tax account issue. When the IRS calls, they will not demand immediate payment by unusual methods. (IRS guidance: https://www.irs.gov/newsroom/tax-scams-consumer-alerts)
  • An official notice will include a notice number, a contact phone number that matches IRS published numbers, and instructions for verifying account balances through IRS online tools or an authenticated IRS phone number.
  • The IRS will not: demand payment via gift/gaming cards, demand payment without giving you an opportunity to question or appeal, threaten arrest, or request credit card or bank information by email.

These characteristics are useful verification anchors when you want to quickly decide whether to treat a message as suspicious.

Common IRS scam tactics and how to spot them

  • Phone scams (robocalls or live impersonators): callers claim you owe taxes and will be arrested or deported if you do not pay immediately. Red flags: insistence on immediate payment, refusal to provide an IRS notice number, request for payment via prepaid cards or wire transfer. The IRS will not threaten arrest or request gift-card payment.

  • Phishing emails and fake websites: emails that look official but use non-irs.gov domains or links that lead to lookalike sites designed to steal credentials. Red flags: poor grammar, mismatched sender domain, links that don’t point to irs.gov. Forward suspicious IRS-related email to phishing@irs.gov and do not click links.

  • Fake letters and notices: documents that mimic IRS formatting but include payment instructions to private accounts or insist on unusual payment channels. Real notices will direct you to official IRS payment options and include a notice ID.

  • Tax preparer and refund scams: dishonest preparers file fraudulent returns or take refunds. Verify preparer credentials and review your return before signing. Use the IRS Directory of Federal Tax Return Preparers and see trusted guidance at irs.gov.

  • Social engineering via data brokers: fraudsters may already have some of your data and will combine it with intimidation to create credibility. Treat unsolicited calls claiming to have account details as suspicious.

Quick verification checklist (8-step)

  1. Pause. Never act on urgent threats; give yourself time to verify.
  2. Check the sender domain and return address. IRS official emails come from irs.gov; the IRS prefers mail for initial contact on tax matters.
  3. Do not call numbers supplied in a suspicious message. Instead, call the IRS at 1-800-829-1040 (individuals) or use the contact numbers listed on IRS.gov.
  4. Search the notice number and language on IRS.gov. Official notices and publications have reference numbers you can confirm.
  5. Never pay with gift cards, reload cards, cryptocurrency, or wire transfers for tax debt. These are scam payment rails.
  6. If an email asks you to open attachments, be cautious — attachments often contain malware. Forward suspected phishing to phishing@irs.gov and delete the message.
  7. If a preparer is involved, verify their PTIN or credential with the IRS Directory of Tax Return Preparers.
  8. Keep documentation: screenshot the call ID, save the email headers, and keep the suspicious letter for reporting.

Real-world examples (anonymized)

  • A taxpayer received a voicemail demanding a $10,000 payment or else saying the caller would arrange arrest. The message came from a number that spoofed a local IRS office. The taxpayer confirmed their account had no balance through IRS Online Account, reported the call to TIGTA, and disabled callbacks from the number. (TIGTA reporting: https://www.tigta.gov/)

  • A business owner got a glossy letter claiming an unpaid employer penalty and demanded immediate payment via wire to a third-party company. The owner called their CPA, who flagged the demand as fraudulent. The business reported the letter to the IRS and the FTC and placed a fraud alert with the major credit bureaus.

These examples underline a repeated theme: consult a trusted source (IRS online account, IRS phone number, or your tax professional) before taking action.

If you think you’re the target or victim: step-by-step actions

  1. Stop communication. Do not give more information or payment.
  2. Document everything: record call details, save emails and letters, and note the payment method requested.
  3. Verify your tax account: sign in to your IRS Online Account (irs.gov) or call 1-800-829-1040 to confirm balances or notices.
  4. Report the scam: forward phishing emails to phishing@irs.gov; report phone scams to TIGTA at https://www.tigta.gov/ or 1-800-366-4484; file complaints with the FTC at https://reportfraud.ftc.gov/.
  5. If you suspect tax-related identity theft (someone filed a return in your name), file Form 14039, Identity Theft Affidavit, and follow IRS recovery procedures (Form 14039 info: https://www.irs.gov/forms-pubs/about-form-14039).
  6. Consider credit protection: place a fraud alert or credit freeze, monitor credit reports, and check IRS transcripts for unauthorized filings.
  7. Work with a qualified tax professional or CPA if you receive a notice that you do not understand or if identity theft is confirmed.

Preventive steps to reduce your risk

  • Use an Identity Protection PIN (IP PIN) from the IRS if eligible — it prevents someone else from filing a federal return with your SSN. Apply via IRS Identity Protection services.
  • Protect your inbox: enable multi-factor authentication (MFA), use unique passwords, and be careful with password-reset links that arrive unexpectedly.
  • Secure physical documents: shred tax returns and financial statements you no longer need.
  • Vet tax preparers: get referrals, confirm credentials, and review returns before signing.
  • Enroll in credit-monitoring or identity-theft protection services if you have heightened risk.

For deeper steps on recovering from tax-related identity theft, see our guide on Protecting Yourself from Tax-Related Identity Theft: Prevention and Recovery and Tax Identity Theft: How to Detect and Resolve Fraudulent Returns.

Table: Common scam types and detection tips

Scam Type What it Looks Like How to Detect Immediate Action
Phone/Robocall Caller demands immediate payment; may spoof IRS numbers IRS never demands payment on the spot or via gift cards Hang up, verify via IRS number 1-800-829-1040, report to TIGTA
Phishing Email Email asks to “verify” SSN or login, contains links Check sender domain; forward to phishing@irs.gov Do not click links; report and delete
Fake Notice Official-looking letter demanding wire/gift-card payment Compare notice number on IRS.gov; call IRS directly Save the letter, report to IRS and FTC
Dishonest Preparer Preparer promises inflated refund, charges strange fees Verify PTIN/credentials; request completed return copy Replace preparer, report to state Board of Accountancy or IRS

Common misconceptions

  • Misconception: The IRS will always tell you by mail. Reality: Initially, sensitive account notices generally come by mail, but the IRS also uses secure online messages and authenticated callbacks for specific issues. However, unsolicited calls demanding money are almost always scams (IRS guidance).

  • Misconception: A caller with an IRS-like ID is real. Reality: Caller ID spoofing is common — scammers can make a number look legitimate even when it’s not.

Final practical tips from my practice

  • Always verify with independent IRS contact methods before paying or sharing PII. In several client cases I’ve handled, a simple hold-and-verify step prevented thousands of dollars in losses.
  • Keep a small binder with your year’s tax records and an up-to-date list of trusted tax professionals to reduce panic-driven choices.
  • Teach elderly family members and staff to treat any unsolicited tax demand skeptically and to contact you or a trusted advisor before responding.

Key resources and where to report

Professional disclaimer: This article is for educational purposes and does not replace personalized tax or legal advice. If you suspect identity theft or have a contested IRS notice, consult a licensed CPA, tax attorney, or the IRS directly.

Author note: My recommendations come from more than 15 years helping taxpayers evaluate notices and recover from scams. Following the verification checklist above will stop most scams before they cause harm. If you need step-by-step help after receiving a suspicious notice, work with a qualified tax professional to avoid making mistakes that slow recovery.