What is an IRS phishing scam?

IRS phishing scams are fraudulent messages (email, text, or phone calls) that impersonate the IRS to steal your personal data, login credentials, or money.

How can I tell if a message is a scam?

Look for urgent threats, requests for payment via gift cards or wire transfer, unexpected attachments or links, and email addresses that don't end in @irs.gov.

How do I report a suspected phishing message?

Report suspected phishing to the IRS through their official channels and to your email provider. Do not click links in the suspicious message.

IRS Phishing Scam Warning — How to Identify & Report

Protect yourself from tax-related phishing attempts

If you receive an unexpected call, email, or text claiming to be from the IRS and asking for money, personal information, or immediate action — treat it with suspicion. The IRS does not initiate contact by email, text message, or social media to request personal or financial information.

How to identify IRS phishing scams

Urgent or threatening language: Scammers often threaten arrest or penalties to make you act quickly.
Requests for payment in unusual forms: Gift cards, wire transfers, cryptocurrency, or prepaid debit cards are red flags.
Suspicious sender addresses: Official IRS email addresses will end in @irs.gov. Look carefully at the full email address.
Unexpected attachments or links: Don't open attachments or click links without confirming the sender.
Requests for personal data: The IRS will not ask for PINs, passwords, bank account information, or credit card numbers by email.

Common scam examples

Emails claiming you are due a refund but asking to "confirm" banking details.
Texts warning of immediate legal action unless you pay a fine immediately.
Phone calls from someone claiming to be an IRS agent demanding payment via gift cards or wire transfer.

What to do if you receive a suspicious message

Do not reply, click links, or open attachments in the suspicious message.
Do not provide personal or financial information over email or to unknown callers.
Verify by visiting the official IRS website (irs.gov) or calling the official IRS phone numbers listed on their site.
Report the message to the IRS and to your email provider. Keep the original message as evidence.

If you believe you have been scammed: Contact your bank or card issuer immediately, change affected online account passwords, and consider placing fraud alerts with credit reporting agencies.

How to report IRS phishing

Report suspected phishing to the IRS using official channels. For detailed reporting instructions and contact points, visit the official IRS website at irs.gov. You can also forward suspicious emails to the IRS’ dedicated reporting inbox and follow their guidance for phone scams.

Frequently asked questions

Q: Can the IRS call and demand immediate payment?

A: The IRS will not demand immediate payment over the phone without giving you the chance to question or appeal the amount. Scammers often impersonate agents to pressure victims.

Q: What if I already clicked a link or gave information?

A: Immediately change your passwords, contact your bank, and review your accounts for unauthorized activity. Report the incident to the IRS and local law enforcement if you lost money.