(continued)

Key elements to check, step by step

1) Examine the format and notice number

Legitimate IRS notices use a standardized layout, include a notice or letter number (for example, CP, CP2000, CP14, or Letter 5071C), and reference a tax year. The notice number usually appears near the top right. If the format looks off — odd fonts, missing IRS contact links, or casual language — treat it as suspicious. Cross-check the exact notice code at the IRS “About Notices” page to confirm whether the code and explanation match what you received (https://www.irs.gov/forms-pubs/about-notices).

2) Use IRS.gov and your IRS Online Account — not the phone numbers on the notice

The official IRS website is the authoritative source for contact information and account history. Log into your IRS Online Account to see notices the IRS has sent or to view balances and payment history (https://www.irs.gov/individuals/view-your-tax-account). If the notice does not appear in your online account and it claims immediate action, that is a red flag. If you must call the IRS, use the phone number shown at https://www.irs.gov/contact rather than any number printed on the notice.

3) Avoid common red flags

  • Demanding immediate payment with threats (arrest, deportation, license revocation)
  • Requests for payment via gift cards, wire transfer, cryptocurrency, prepaid debit cards, or apps
  • Asking for full Social Security numbers, bank account numbers, or PINs over email or phone
  • Poor grammar, misspellings, or unprofessional formatting
  • Return email addresses or URLs that don’t end in “irs.gov”

The IRS will not demand payment via gift cards or unusual methods; it will not threaten you with immediate law enforcement actions by email or text (IRS Scams and Fraud Alerts: https://www.irs.gov/newsroom/tax-scams-consumer-alerts).

4) Match notice details to your tax records

Look for the tax year referenced, the type of tax (individual income, employment, business), and amounts. If the notice references income or credits you never had, that suggests identity fraud or a scam. For CP2000 notices (proposed adjustments based on third-party reporting), the IRS includes the information they received and an explanation; you should compare that to your filed return and wage documents (Form W-2, 1099s).

5) Verify sender information and mailing method

Authentic paper notices arrive by U.S. mail from the IRS and include a contact address and reply envelope in many cases. The IRS uses certain return addresses and will usually provide instructions on how to respond. Beware of urgent-looking emails and texts. If you received a phone call and the caller demands immediate payment, ask for their name, call back number, and a reference number — then verify independently using IRS.gov.

6) Use government reporting channels for suspicious communications

Practical examples from practice

  • Case: A client received a letter demanding $4,800 for unpaid taxes, with a phone number and threat of arrest. The letter used odd phrasing and the tax year didn’t match the client’s return. We logged into the client’s IRS Online Account, found no matching notice, and reported the mailpiece to TIGTA. The client avoided an immediate and unnecessary payment.

  • Case: A small-business owner got an email apparently from the IRS requesting verification of EIN data. The email contained a link to a non-irs.gov domain. We redirected the owner to the IRS guidance and the business’s online account, which showed the IRS had sent no such request. The owner froze their bank account and reported the email to phishing@irs.gov and their bank.

What to do if the notice is authentic

  • Read the notice carefully to understand deadlines and options. Many notices provide a short time window to respond or arrange payment.
  • If the IRS proposes additional tax (e.g., CP2000), either agree, pay, or dispute. When disputing, respond in writing with documents that support your return.
  • Consider payment plans or an Offer in Compromise if you can’t pay in full. The IRS provides options and online tools to set up installment agreements (https://www.irs.gov/payments).
  • Keep a clear paper and digital record of the notice, correspondence, and any payments.

What to do if the notice is a scam

  • Stop all communication with the sender.
  • Do not click links or give personal/financial information.
  • Forward phishing emails to phishing@irs.gov and report impersonation calls to TIGTA (https://www.tigta.gov).
  • Notify your bank and credit card companies if you provided payment details.
  • Consider a free credit report review and a fraud alert or security freeze on your credit file if your SSN was exposed (Consumer Financial Protection Bureau: https://www.consumerfinance.gov/).

Documenting and preserving proof

Treat every notice as an important record. Scan and save the original mailpiece and any related emails, call logs, and screenshots. For help with record-keeping, see our guide on documenting correspondence: Decoding IRS Notices: How to Read and Respond (internal link: https://finhelp.io/glossary/decoding-irs-notices-how-to-read-and-respond/). Also see our walkthrough on using IRS online tools to check notices and payments: How to Use IRS Online Tools to Check Notices, Payments, and Refunds (internal link: https://finhelp.io/glossary/how-to-use-irs-online-tools-to-check-notices-payments-and-refunds/).

When to get professional help

If the notice alleges a large liability, reports unfiled returns, or claims identity theft, consult a tax professional or enrolled agent. In my work with clients, an early consultation can prevent costly missteps—especially when deadlines are short or the IRS threatens enforcement actions such as levies or liens. For path-specific responses, see our guide on prioritizing IRS notices: Prioritizing IRS Notices: A Quick Action Plan (internal link: https://finhelp.io/glossary/prioritizing-irs-notices-a-quick-action-plan/).

Final checklist (short)

  • Do not act on contact information in the suspect notice.
  • Verify the notice number and code on IRS.gov.
  • Check your IRS Online Account for matching correspondence.
  • Report suspicious emails to phishing@irs.gov and impersonation calls to TIGTA.
  • Keep records and consult a tax professional when in doubt.

Professional disclaimer

This article is educational and does not replace tailored tax advice. For advice specific to your situation, consult a licensed tax professional, CPA, or enrolled agent. The facts and links in this article are current as of 2025 and reference official resources such as IRS.gov and the Treasury Inspector General for Tax Administration.