Why verifying an IRS letter matters

Getting a notice from the IRS can trigger anxiety. Scammers exploit that fear by sending convincing fake letters and emails that pressure people into paying or sharing sensitive data. Confirming a letter’s authenticity protects your money, Social Security number, and credit. According to the IRS, most official communications arrive by U.S. mail; the agency will not demand payment via third‑party gift cards, prepaid debit cards, cryptocurrency, or threaten immediate arrest in a demand for payment (IRS.gov). For broader identity‑theft reporting, the Federal Trade Commission recommends IdentityTheft.gov as the central resource (FTC/IdentityTheft.gov).

Quick checklist: First things to look for

  1. Compare the notice code and form number. IRS letters use codes like CP, LT, or CP2000, and usually refer to a form or tax year. If the code/key is missing or looks garbled, be suspicious. See our guide to decoding common IRS notice codes for context: Decoding the Most Common IRS Notice Codes: A Quick Guide.

  2. Verify the header and official markings. A legitimate notice will include an IRS logo, a letter date, a letter ID (a multi‑digit number often near the top), the last four digits of your SSN or ITIN (not the full number), and a clear description of the issue or action requested.

  3. Check the return address and mailing method. The IRS mails from various processing centers; cross‑check the mailing address on the notice with addresses listed on IRS.gov. If the letter arrives as an email, text, or social media message, treat it as a scam. The IRS rarely initiates taxpayer contact via email or text for tax matters and will not send you a direct link asking for login credentials or e‑file information.

  4. Inspect the payment instructions. Legitimate IRS letters provide payment options such as online payment via the IRS Direct Pay or Electronic Federal Tax Payment System (EFTPS). The IRS will never demand payment with gift cards, cryptocurrency, or by instructing you to wire money to an account that isn’t clearly an IRS payment portal.

  5. Note language and tone. Look for professional wording and specific references to the tax year and tax form. Misspellings, poor grammar, or high‑pressure language (e.g., “pay immediately to avoid arrest”) are strong red flags.

Step‑by‑step verification process

  1. Read the entire letter carefully. Highlight the notice code (e.g., CP2000, CP14, LT11), the tax year involved, the amount in question, and any taxpayer ID shown.

  2. Cross‑reference the notice code. Use the IRS website or our internal guide to match the code to the type of letter it purports to be. If you’re unsure what a code means, consult the IRS notice code pages or our article on common notice codes: Decoding the Most Common IRS Notice Codes: A Quick Guide.

  3. Confirm payment and contact details on IRS.gov. Do not call the phone number printed on the suspicious letter until you verify that number on IRS.gov. To find official IRS contact information, go to the Contact Your Local IRS Office or main contact pages on IRS.gov (https://www.irs.gov/). Calling an unverified number is a common step scammers use to harvest personal information.

  4. Use your IRS online accounts. If you have an IRS online account (Online Account or Secure Access), log in directly through IRS.gov—do not use links from the letter—to view any official notices. For refund‑related questions, use Where’s My Refund? on IRS.gov.

  5. Confirm identity protection measures. If the letter references identity theft or an Identity Protection PIN (IP PIN), verify your IP PIN status through the IRS secure portals. If you want to learn about IP PINs and whether you should request one, see: Navigating IRS Identity Protection PINs (IP PIN): Why and How to Use One.

  6. Contact the IRS using verified channels. If you still need to confirm the notice, use the phone numbers listed on IRS.gov or the contact number shown in the notice—but only after verifying that the printed number matches the number on IRS.gov. Large tax issues can also be handled via an in‑person appointment at a local IRS office if necessary; find locations on IRS.gov.

What to do if the letter is likely fake

  • Do not call the number on the questionable letter or use links inside an email/text.
  • Do not provide banking details, Social Security numbers, or authorize payments.
  • Report the communication to the IRS: forward suspicious emails to phishing@irs.gov and report IRS impersonation scams at the IRS scams page (https://www.irs.gov/tax‑scams). For phone scams, report the incident to the Treasury Inspector General for Tax Administration (TIGTA) and to the Federal Trade Commission via IdentityTheft.gov.
  • Save the letter as evidence and record any phone numbers or email addresses the scammers used.

Real‑world example (from my CPA practice)

A client received a crisp letter with an IRS logo and a “bill” for back taxes including a small payment coupon. The letter’s tone was urgent and it included a toll‑free number. My first step was to confirm the notice code and compare the phone number to IRS.gov. The number on the letter routed to a call center that required payment by a prepaid card—an immediate red flag. After reporting the incident to the IRS and TIGTA, we notified the client’s bank and changed her online credentials. Had she followed the letter’s instructions, she would have lost money and exposed financial accounts.

Common red flags and scam tactics

  • The letter demands immediate payment via nontraditional methods (gift cards, crypto, wire transfers).
  • The sender wants remote access to your device or asks for full SSN, bank login, or credit card info over email or phone.
  • The letter contains significant spelling/grammar errors or uses scare tactics and threats.
  • The notice lacks a clear notice code, tax year, or uses generic salutations such as “Dear Taxpayer.”

For more on impersonation scams and how to avoid them, see our focused guide: Recognizing and Avoiding IRS Impersonation Scams.

Special situations to watch for

  • Audit notices: An audit letter from the IRS will include a clear description of what records are needed and a contact method. Don’t send original records unless specifically requested. Consider engaging a tax pro if you receive an audit notice.

  • Liens and levies: The IRS will generally send a notice of intent to levy and provide a period to respond before taking seizure actions. Be cautious: collectors impersonating IRS agents may claim to have already filed liens to force payment.

  • Identity theft claims: If you receive a notice about an identity protection PIN or unusual returns filed in your name, report it immediately. The IRS has dedicated processes to handle identity theft claims and to issue IP PINs for eligible taxpayers (IRS.gov).

Reporting and recovery steps

  1. Report suspicious mail, email, or phone calls to the IRS (https://www.irs.gov/). Forward phishing emails to phishing@irs.gov.

  2. File a complaint with the Federal Trade Commission at IdentityTheft.gov if your identity is compromised.

  3. Contact your bank or credit card company to block payment methods used in a scam.

  4. If you already paid, request a trace through your bank, report to the payment processor, and inform the IRS that you were a victim of impersonation.

Recordkeeping and follow‑up

Keep copies of all notices, dates you contacted the IRS, and names of IRS representatives you spoke with. If you consult a CPA or tax attorney, provide them with copies of the letter and any screenshots of related emails or texts.

When to get professional help

If the letter involves large amounts, liens, levies, or an audit, get a tax professional involved early. In my experience, engaging a CPA or tax attorney before responding reduces mistakes and prevents giving scammers an opening to escalate the issue.

Short FAQ

  • Will the IRS call me first about taxes I owe? The IRS typically first sends a notice by mail; unsolicited calls demanding immediate payment are likely scams (IRS.gov).

  • Can I trust a letter with an IRS logo? Logos can be copied. Use codes, return addresses, and official IRS channels to confirm authenticity.

  • What if I already paid a scammer? Contact your bank immediately, report the fraud to the FTC at IdentityTheft.gov, and notify the IRS. Keep evidence for law enforcement and recovery efforts.

Authoritative resources

Professional disclaimer

This article is educational and does not replace personalized tax advice. If you face a specific tax problem, contact a qualified CPA, tax attorney, or the IRS directly. In my practice I’ve handled dozens of impersonation incidents; following the steps above has prevented losses for many clients.