Avoid IRS Email Scams With These Warning Signs

Outside of filing taxes, most people hope the Internal Revenue Service (IRS) leaves them alone for the remainder of the year. However, you may receive communication from the IRS — or someone posing to be the IRS. Scammers use the IRS (and people’s fear of the organization) to prey on unsuspecting people.

Many scams involve the IRS, including tax refunds, auditing, and more. These scams are not limited to individuals; scammers also use the veil of the IRS to scam tax professionals and businesses.

Before we look at common email scams, it is important to note that the IRS will not initiate a conversation with you via email, text message, or social media. Along with understanding common IRS scams, you should also consider these tips to protect your identity.

Offers 24/7 fraud remediation

4.8

AllAboutCookies writers and editors score products based on a number of objective features as well as our expert editorial assessment. Our partners do not influence how we rate products.

Editorial Rating

Learn More

On Aura Identity Theft's website

Identity Protection

Aura Identity Theft

Save up to 68% Off

• #1 rated ID theft protection service with a full suite of monitoring tools
• Includes up to $1 million in ID theft insurance for up to five adults
• Protect your children with robust parental controls and gaming alerts

Most common IRS email scams

Many types of IRS email scams exist, and new scams are always being created to trick people into sharing information or sending money to scammers. There may even be new scams after current events, such as the California wildfires. The IRS has warned people to look out for the following common email scams.

Scams targeting educational institutions

Scammers are sending phishing emails to users with .edu email addresses. These emails may request additional information for your tax refund on behalf of the IRS, such as PIN and credit card numbers, financial account passwords, and Social Security numbers.

The phishing schemes will prompt the recipient to follow a link. The link will look like a legitimate IRS website but will ask for the recipient’s personal or financial information. Once you click on the link, it may prompt you to enter your username and password, Social Security number, credit card number, or other personal information. If you receive a suspicious email like this, do not click the link or input any personal information. Report phishing scams to the IRS.

Phishing emails impersonating the Taxpayer Advocacy Panel

Instead of forging an official IRS email, fraudsters may also act as the Taxpayer Advocacy Panel. They hope that an email from a different organization inside the IRS may confuse people enough to share sensitive information. In many cases, the email may be about a potential refund, and it will ask for information from the recipient to finish the refund process.

Tax refund recalculation scams

Scammers may try to gain access to your information by claiming that your tax refund needs a recalculation. This tax scam can scare unsuspecting people into sharing personal information because they may be wary of a reduced refund.

The email’s subject line may mention a tax refund recalculation, and the body may contain a link asking the recipient to input personal information into a bogus form.

Unemployment fraud

While many of these scams involve IRS impersonation, others involve pretending to be another person to claim unemployment benefits. If you receive a notice from the IRS about unemployment benefits that you did not request or receive, report the fraud to the state where it occurred. You can learn more about unemployment fraud from the Department of Labor.

Attacks on cloud-based platforms

Scammers are also working to gain access to cloud-based platforms that may host the personal information of tax professionals and their clients. Once scammers gain access to these platforms, they can find information from previous years’ tax returns to file new returns and gain access to the refunds. Smaller tax professionals may be more susceptible to this scam because they often have less strict security standards.

Requests to update your IRS e-file

You may receive an email purporting to be from an IRS employee requesting that you update information as part of your IRS e-file. These emails will look like official IRS communication requesting that you confirm your Electronic Filing Identification Number (EFIN). Scammers can then use that EFIN to gain access to your information.

Spear-phishing emails targeting tax professionals

Spear-phishing is a more targeted email scam where fraudsters learn about a person they are targeting to be more enticing to the target. Many of these spear-phishing scams target tax professionals.

Fraudsters may email a tax professional claiming to be a potential client. The “potential client” will send a file of alleged tax documents. Once the tax professional opens the email link, it installs malware onto their computer.

Disaster-related email scams

Scammers used the COVID-19 pandemic to create new and innovative ways to access people’s personally identifiable information (PII). Quarantine and pandemic protocols meant people sent more tax-related and personal information via email. Scammers use these new protocols to send malware and other unsafe links and attachments to tax professionals. If a tax professional clicks on the malware, it could give scammers access to clients' information. 

Similarly, bad actors try to capitalize on natural disasters like the California wildfires to trick victims out of their money or deeds.

IRS email scam warning signs

Various IRS email scams circulate throughout the year. However, many of these scams have similar warning signs:

• Abnormal communication method: As previously stated, the IRS does not communicate with people via email, text message, or social media. In most cases, the IRS will send you an official letter via the United States Postal Service (USPS).
• Unusual email addresses: If you receive an email claiming to be from the IRS, you should always check the sender’s email address.
• Suspicious links: Scammers may be hoping you’ll unsuspectingly click on a link and input your personally identifiable information into a fraudulent webpage. Always look into the link’s URL before clicking on it. You can do this by hovering over the link to see the actual URL.
• Sense of urgency: Be cautious of emails with an unnecessary sense of urgency. Emails, text messages, or other communication that demand information quickly are likely scams.
• Vague subject lines: Another common sign of a scam is a vague subject lines or unclear information within the email’s body. These subject lines could say something like “Tax Refund Recalculation” or "Automatic Income Tax Reminder."

How to report IRS email scams

Reporting any potential scams to the IRS is important to help protect future victims.

• To report a phishing email scam, forward the email to phishing@irs.gov.
• To report unemployment fraud, report the scam to the state where it occurred.
• If you are a victim of identity theft, report it to Identify Theft Central.
• To report impersonation scams, contact the Treasury Inspector General for Tax Administration on the IRS Impersonation Scam Reporting webpage.

Best ID theft services for fraud remediation

After you report the fraud, contacting a trained remediation specialist could help reduce financial damages and protect your identity.

Service
Price	Starts at $9.00/mo (billed annually)	Starts at $7.50/mo for first yr (billed annually)	Starts at $8.99/mo
# of people covered	1 - 5 adults, unlimited children	1 - 2 adults, up 5 children	1 - 5 adults, unlimited children
Types of identity monitoring	Identity and SSN, account breach, home and auto title, criminal and court records	Identity and SSN, dark web, phone takeover, home title, social media	Dark web, high-risk, bank account, social media, credit and debit card
ID theft insurance	Up to $1 million	Up to $1.05 million through $3 million, depending on plan	Up to $1 million
Credit monitoring
Identity restoration services
Details	Get Aura	Get LifeLock	Get Identity Guard

FAQs

Bottom line

Whether you’re a tax professional or a taxpayer, looking for warning signs of a scam when receiving any communication from the IRS is essential. The IRS and tax professionals have access to the most sensitive personal information. If scammers access that information, they may be able to access future tax refunds or develop other scams to steal money from victims.

If you receive any contact from the IRS, look for the warning signs of a scam before clicking on any link or inputting any information. The IRS will not communicate via email, text, or social media. Official communication from the IRS will be via mail, phone, or an in-person visit. 

If you think you are a victim of an IRS scam, report the fraud to phishing@irs.gov. Then, contact your remediation specialist to help mitigate the financial damages.

4.8

AllAboutCookies writers and editors score products based on a number of objective features as well as our expert editorial assessment. Our partners do not influence how we rate products.

Editorial Rating

Learn More

On Aura Identity Theft's website

Identity Protection

Aura Identity Theft

Save up to 68% Off

• #1 rated ID theft protection service with a full suite of monitoring tools
• Includes up to $1 million in ID theft insurance for up to five adults
• Protect your children with robust parental controls and gaming alerts

Author Details

Andrew Adams

About the Author

Andrew Strom Adams is a freelance writer focused on online privacy and digital security. He writes on various topics to help individuals protect themselves on the internet. Andrew has worked in legal marketing, technology, and startups. He has more than 12 years of experience in marketing and communications. He holds an M.B.A. from Westminster College and a B.A. in journalism from Oklahoma Baptist University. When he’s not writing, he’s playing with his two kids or watching reality TV.