Guide
How to identify an IRS impersonation scam
URLVIS Security Team · Last updated: August 29, 2026
A message claiming to be from the IRS is very likely a scam if it arrived as a text, social media message, or unexpected email — the IRS initiates almost all contact through postal mail, and it never opens a case by texting a link. IRS impersonation is one of the most persistent fraud themes in the United States because it combines two powerful levers: fear of federal enforcement and hope for an unclaimed refund. Both versions push the same action — open a link or call a number controlled by the scammer. The threatening variant claims a tax debt, warns of arrest, license revocation, or deportation, and demands immediate payment through wire transfer, gift cards, or cryptocurrency. No legitimate tax authority is paid in gift cards; that request alone settles the question. The refund variant is quieter and currently more common: a text or email says a refund of a specific amount is waiting and asks you to "verify" your identity, Social Security number, or bank card to receive it. A real refund is issued to the bank account on your return or by mailed check — no card number or password is ever needed to receive money. Campaigns spike around filing season, stimulus or relief programs, and any widely reported IRS backlog, because those headlines make an unexpected tax message feel plausible. The verification step is always the same and always free: log in to your own account at the official IRS website, typed by hand, or call the IRS through the number published there. If the debt or refund is real, it will be visible in your account transcript.
How to Identify
- Treat any first contact by text message, social media DM, or messaging app as fraudulent. The IRS does not initiate contact that way, and it does not send links to claim refunds.
- Check how the message wants to be paid. Demands for gift cards, wire transfers, cryptocurrency, or payment apps are conclusive — federal tax is never collected through those channels.
- Ignore threats of immediate arrest, deportation, or license suspension. Real tax enforcement is a slow, documented process with formal notices and appeal rights, not a countdown in a text.
- Look at the link before touching it. The real domain is irs.gov; anything else — extra words, different endings, shorteners, or lookalike spellings — is a hostile page.
- A request for your Social Security number, bank login, or card details to "release" a refund is the scam itself. Refunds are deposited to the account on your return; no card entry is involved.
- Verify claims in your own IRS online account, reached by typing the address yourself. A debt or refund that exists will appear there; a claim that appears only in the message does not exist.
- Be suspicious of exact dollar amounts and case numbers. Scammers invent precise figures because specificity feels official; a number is not evidence.
- Caller ID showing an IRS office proves nothing — numbers are trivially spoofed. Hang up and call back only through the number on the official website.
- Note the grammar of urgency: "final notice", "within 24 hours", "legal action has been filed". The IRS communicates deadlines in letters with notice numbers you can look up, not in pressure texts.
Real-World Examples
The examples below are illustrative only. They do not refer to any real person, brand, or organization and exist solely to show the scam pattern.
Fabricated refund text
Fictional example — Federal Tax Notice: Your refund of $1,482.50 is pending. Verify your identity within 48 hours at tax-refund-portal.example to avoid forfeiture.
Fabricated enforcement voicemail script
Fictional example — "This is Officer Reed from the Revenue Enforcement Division. A warrant has been prepared under your name. Call 000-555-0142 immediately with your case ID to stop the proceeding."
Fabricated verification email
Fictional example — Taxpayer Records Center: We could not match your filing. Confirm your SSN and bank details at records-update.example within 24 hours or your account will be suspended.
Sources
Reporting Channels
- IRS phishing reporting: Forward suspicious IRS-themed emails to [email protected]; do not reply to the sender.
- Treasury Inspector General for Tax Administration (TIGTA): Report IRS impersonation calls and messages to TIGTA.
- Federal Trade Commission: Report the scam and any financial loss through ReportFraud.ftc.gov.
- Mobile carrier spam reporting: Forward scam texts to 7726 (SPAM) so your carrier can block the sending number.
FAQ
Does the IRS ever send text messages?
Not to open a case, demand payment, or offer a refund. The IRS initiates contact by postal mail. Limited IRS text programs exist only where a taxpayer has explicitly opted in, and they never ask for personal or financial details through a link.
I got a message about a refund I might actually be owed. How do I check safely?
Ignore the message entirely and check the official "Where's My Refund" tool or your IRS online account, typing irs.gov yourself. A real refund shows up there and is paid to your bank account or by check — never through a form that asks for your card number.
What should I do if I already gave my Social Security number?
Visit the FTC's identity theft recovery process at IdentityTheft.gov, consider an IRS Identity Protection PIN so no one can file a return in your name, and place a fraud alert with the credit bureaus. Keep the original message as evidence.
What if I paid a fake IRS demand with gift cards?
Contact the gift card issuer immediately — some cards can be frozen if unredeemed — then report the loss to TIGTA and the FTC. Keep the cards, receipts, and the scammer's messages; they are evidence.
The caller knew my name and part of my SSN. Doesn't that make it real?
No. Partial identity data circulates from breaches and is used precisely to sound credible. The IRS never asks you to confirm the rest of a number a caller reads out. Hang up and verify through your own account.
Related Risks
How This Guide Was Prepared
This guide was compiled from publicly available fraud-reporting sources and URLVIS's own multilingual risk taxonomy; an AI-assisted draft was reviewed before publication. It is for general information only and is not legal or financial advice. Spotted an error or outdated detail? Report it to [email protected].