How can you tell a scam letter from an official IRS notice?

Receiving a letter about taxes is stressful. Scammers know that and replicate the look and tone of the IRS to push you into giving money or personal data. This guide gives clear, step-by-step checks I use with clients to separate genuine IRS notices from fraud, plus what to do if you’ve already replied.

Quick red flags to scan first

  • Generic greeting, such as “Dear Taxpayer.” The IRS usually uses your full name or business name when it can. (There are exceptions for certain mailings.)
  • No notice or letter code. Official IRS mail shows a notice or letter number (for example, CP2000, LT11). If there’s no code, be suspicious.
  • Urgent threats to arrest or deport you. The IRS will never threaten criminal action in initial mail or demand immediate payment via untraceable methods.
  • Requests for unorthodox payments (prepaid gift cards, cryptocurrency, wire transfers, or third‑party apps). The IRS accepts payment via official channels only.
  • Poor grammar, odd logos, low‑quality paper, or mismatched return addresses.

These quick checks take 15–30 seconds and stop many scams before they escalate.

Step-by-step verification checklist (use this every time)

  1. Don’t use any phone numbers, links, or QR codes in the suspicious letter. Scammers embed fake contact info.
  2. Look for the notice/letter code and the tax year it references. Note those exactly.
  3. Go to IRS.gov and search the notice code or use the IRS “Contact” pages to confirm wording and next steps. (IRS official resources: https://www.irs.gov) — do not use caller ID or the number on the letter.
  4. If the letter claims you owe money, confirm acceptable payment options on IRS.gov (Direct Pay, EFTPS, online payment agreements, check/money order). The IRS explains legitimate payment methods on its site.
  5. If you still doubt authenticity, call the IRS using a number from IRS.gov or get help from a tax professional. Avoid numbers that came with the suspicious letter.

In my practice I ask clients to read the letter aloud and list every requested action. This often reveals unrealistic or unusual demands that are hallmark signs of fraud.

How official IRS notices typically look and act

  • Mailed from the IRS to your last known address in IRS records. The IRS sends most notices by U.S. mail rather than email or text for collection and account issues. (IRS guidance: the agency does not initiate contact with taxpayers by email, text or social media to request personal or financial information.)
  • Contains a unique notice number and explains why the IRS is contacting you, the tax year affected, and the specific actions or timelines required.
  • Provides an IRS phone number for follow-up that matches numbers listed on IRS.gov.
  • Payment instructions direct you to IRS systems like Direct Pay, Electronic Federal Tax Payment System (EFTPS), pay by mail, or IRS-approved credit card processors. They will not insist on gift cards or cryptocurrency.
  • Some official letters have IRS watermarks or barcodes and are printed on consistent, professional templates. The IRS also sends a copy of many notices digitally through your account if you use authorized IRS e‑services.

For more on how to read and respond to legitimate notices, see our guide: How to Identify and Respond to an IRS Notice Quickly.

Typical scam tactics and the language they use

Scams aim to provoke fear or urgency. Watch for phrases like:

  • “Pay immediately to avoid arrest or deportation.”
  • “Contact us within 24 hours or you’ll face severe penalties.”
  • “Send payment via gift cards, wire transfer, or cryptocurrency.”
  • “Verify your bank account or Social Security number right now.”

Scammers also spoof IRS logos, create fake badge numbers, and show manipulated tax amounts to force fast action. When clients receive that pressure, I instruct them to stop and verify; the real IRS allows time and provides an appeal process.

What to do if the letter asks for payment

  • Pause. The wrong move is immediate payment.
  • Verify the notice code and amount against IRS records by logging into your secure IRS account at IRS.gov or calling the IRS at a number listed on IRS.gov.
  • If payment is genuinely required and you owe taxes, use official methods: IRS Direct Pay, EFTPS, online payment agreement, check, or credit card via an approved processor.

Never pay through third‑party gift cards, cryptocurrency transfers, money‑transfer services, or by wiring funds based on instructions in a letter you suspect.

What to do if you already responded or paid

  1. Contact your bank or card issuer immediately to try to stop or reverse the payment.
  2. If you gave personal information (SSN, DOB, bank account), go to IdentityTheft.gov to report and recover identity: https://www.identitytheft.gov (FTC resource).
  3. Report the incident to the IRS: forward suspicious emails to phishing@irs.gov and review IRS guidance for impersonation scams at IRS.gov. You can also file a complaint with the Treasury Inspector General for Tax Administration (TIGTA) at https://www.tigta.gov and report to the Federal Trade Commission at https://www.ftc.gov.

In one case from my practice, a client paid a scammer via prepaid cards. After contacting his card issuer and reporting to TIGTA and the bank, we limited further loss and placed fraud alerts on credit reports.

How to verify an IRS notice is legitimate (practical tests)

  • Verify the notice/letter code on IRS.gov or compare language with the IRS’s official examples.
  • Search the exact wording in a web browser along with “IRS” — many scams use reusable templates and are documented online.
  • Check whether the letter references your exact tax filing name, address, and tax year. Mismatches are suspicious.
  • If the letter requests immediate personal information by email, text, or phone, it is almost certainly fraudulent. The IRS will first contact by mail for most matters.

For deeper decoding of notice codes and common phrases, see our practical reference: A Practical Guide to Common IRS Notice Codes and What They Mean.

Reporting and next steps

  • Report suspicious emails to phishing@irs.gov and follow the IRS’s published steps for identity theft and impersonation scams (see IRS.gov for current guidance).
  • File complaints with TIGTA and the FTC if you lose money or personal information.
  • Consider placing fraud alerts or credit freezes with Equifax, Experian, and TransUnion if your personal data was exposed.

Additional protective steps (practical habits)

  • Keep your mailing address current with the IRS by filing Form 8822 if you move. Incorrect addresses increase risk that important mail is intercepted or missed.
  • Use strong unique passwords and multi‑factor authentication on accounts that store tax documents (tax preparer portals, financial institutions, email).
  • If you work with a tax pro, confirm they use secure portals and never send sensitive data by unencrypted email.

Common misconceptions

  • The IRS will not initiate tax collection by email, text, or social media. They will, however, send some informational emails and accept electronically filed returns; any request for payment or SSN via these channels is suspect.
  • A return address that looks official does not guarantee authenticity. Scammers often forge return addresses or use look‑alike domains.

Final checklist to act on a suspicious letter

  1. Do not call the phone number or click links in the letter.
  2. Note the notice/letter code and tax year.
  3. Confirm on IRS.gov or call the IRS phone number listed on IRS.gov.
  4. Report phishing emails to phishing@irs.gov and file complaints with TIGTA/FTC if appropriate.
  5. If your identity or funds are compromised, follow steps on IdentityTheft.gov and contact your bank.

Professional disclaimer

This article is educational and based on experience as a tax professional. It is not personalized tax advice. If you have a specific notice or suspect you are a victim of a scam, consult a qualified tax professional or contact the IRS directly via IRS.gov.

Authoritative resources