The most useful thing to know about tax scams is how the IRS actually starts a conversation: with a letter, delivered by the postal service. It does not call out of nowhere to demand payment, text you about a refund, or email you a link to verify your identity. Nearly every tax scam depends on the victim not knowing this one fact, because once the scammer's opening move contradicts it, the whole act falls apart.
Tax scams deserve more caution than the average scam, because the stakes are higher. Your tax file contains your Social Security number, your income, your address, your bank account, and your dependents' details, everything an identity thief needs in one place. And the payoff for a criminal is not just a stolen password but a stolen refund, which can take months of paperwork to claw back.
The good news is that tax scams are repetitive. A handful of scripts account for almost everything you will encounter, and each one has tells you can learn in a few minutes. This guide covers the common versions, the signs that give them away, and the steps that protect your refund before anyone can touch it.
Why tax scams work so well
Tax scams combine three pressures that rarely appear together. First, fear: the IRS is one of the few organizations that can genuinely garnish wages or freeze a bank account, so threats that would sound absurd from a fake retailer sound plausible here. Second, deadlines: filing season has a real cutoff in mid April, and scammers borrow that urgency to rush you past your own judgment. Third, unfamiliarity: most people deal with the tax system once a year, have never seen a real IRS notice up close, and quietly worry they made a mistake on some past return. A scammer only has to say there is a problem with your filing, and your imagination does the rest.
Timing multiplies the effect. A fake refund text lands in March, when you really are waiting on a refund. A fake unpaid-balance call arrives in the anxious week after you file. Like all phishing, the attack targets your attention, not your computer.
How the IRS actually contacts people
Measure every suspicious contact against these rules. Each break is a verdict.
- First contact comes by mail. The IRS opens nearly every issue with a paper notice. Calls or visits happen only after letters have gone out, and collection moves slowly, with formal appeal rights at every step.
- It never demands one specific payment method. Anyone requiring gift cards, wire transfers, cryptocurrency, or a payment app is a criminal, without exception. Real payments go through IRS.gov or by check to the United States Treasury, never to a person.
- It does not threaten immediate arrest, deportation, or a suspended license over the phone. Those threats exist only in scripts.
- It does not start contact by email, text, or social media to ask for personal or financial details. A text about your pending refund with a link is fake every time.
- Refunds never need activation. There is no legitimate step where you click a link or type in card details to release a refund.
The scams you are most likely to see
Fake refund texts and emails
The most common version by far. A message claims your refund is approved, delayed, or stuck pending verification, and links to a page dressed up as the IRS site. The page asks for your Social Security number, date of birth, and bank or card details, sometimes a photo of your driver's license. Everything typed there goes straight to the scammer. Since the IRS does not text refund links, the message itself is all the proof you need.
IRS impersonation calls
A caller, often behind a spoofed number that shows a government area code, claims you owe back taxes and will be arrested today unless you pay right now, usually by gift card or wire transfer. The script leans on fear and secrecy, warning you not to hang up or tell anyone. Hang up anyway. If you worry something real is underneath, log in at IRS.gov and check your actual balance.
Ghost tax preparers
A preparer advertises unusually large refunds, invents deductions or credits, charges a fee based on the inflated refund, then refuses to sign the return or include their preparer tax identification number, which every paid preparer is legally required to have. When the IRS questions the return, the ghost has vanished and you are on the hook for every penny. Never sign a blank or unfinished return, and never use a preparer who will not sign it too.
Tax identity theft
A criminal who already holds your Social Security number, often from a data breach, files a fake return in your name early in the season and pockets the refund. Most victims find out only when their own e-filed return bounces back as a duplicate. This is the most damaging tax scam because it is a full case of identity theft, not just one lost payment, and the same stolen data tends to resurface in loan applications later.
W-2 and payroll scams at work
These target HR and payroll staff rather than individuals. An email impersonating an executive asks for every employee's W-2 forms, or asks payroll to switch an employee's direct deposit. If you work in either role, treat any emailed request for tax forms or banking changes as fake until you have confirmed it by phone or in person.
Tax relief and settlement schemes
Some companies advertise that they can settle tax debt for pennies on the dollar. They charge large upfront fees, then file paperwork you could have filed yourself, or file nothing at all. The IRS does run real hardship programs, but you apply directly and the eligibility rules are strict. Anyone who guarantees a settlement before seeing your records is selling a fantasy.
Red flags that end the conversation
Any single item on this list means scam. You do not need a second sign.
- Payment demanded by gift card, wire transfer, cryptocurrency, or payment app.
- Threats of arrest today, deportation, or a suspended Social Security number. There is no such thing as suspending a Social Security number.
- A link in a text or email about a refund, a tax bill, or identity verification.
- Pressure to stay on the line and keep the call secret.
- A preparer who will not sign your return or wants your refund sent to their account.
- A request to read back a verification code sent to your phone. That code is someone logging into one of your accounts.
Protect your refund before you file
- File as early as you reasonably can. Tax identity theft is a race: whichever return arrives first under your Social Security number usually wins. Filing early closes the window.
- Get an Identity Protection PIN. The IRS issues a free six-digit IP PIN that must accompany any return filed under your number. Sign up through your account at IRS.gov. Once it is active, a thief's fake return fails automatically, which makes it the strongest single defense on this list.
- Create your IRS online account before someone else does. It shows your balance, notices, and past returns, so you can check any scary claim in minutes instead of taking a caller's word for it.
- Vet your preparer. Ask for the preparer tax identification number, confirm they will sign the return, and make sure the refund is routed to your own bank account.
- Lock down the email account your taxes flow through. Tax software password resets, refund alerts, and preparer messages all pass through it. Give it a strong unique password and two-factor authentication first, and run the address through our free email breach checker to see whether it already circulates in leaked data. If it does, expect more convincing scams aimed directly at you.
If you already responded to one
Move quickly and skip the embarrassment. Fast action limits most of the damage.
- Gave card or bank details: call your bank or card issuer now, block the card, and dispute anything that has already posted.
- Paid with gift cards: contact the card company immediately and keep the cards and receipts. Recovery is not guaranteed, but speed helps.
- Shared your Social Security number: request an IP PIN right away, place a free credit freeze with all three credit bureaus, and file a report at identitytheft.gov, which builds a recovery plan and the documents you need.
- A fake return was filed in your name: complete IRS Form 14039, the Identity Theft Affidavit, and submit your real return on paper as instructed. The process takes months, so keep copies of everything.
- Spotted the scam but did not bite: forward scam emails to [email protected], forward scam texts to 7726, and report impersonation calls to the Treasury Inspector General for Tax Administration through its website.
A ten-minute setup before filing season
Do these once and every scam above gets much harder to run on you.
- Create your online account at IRS.gov and look around, so you know what real balances and notices look like.
- Request an Identity Protection PIN while you are there.
- Turn on two-factor authentication for your email account and your tax software.
- Adopt one standing rule: any tax call, text, or email demanding action gets verified by logging in at IRS.gov, never through the message itself.
- Set a reminder to file early, even if you expect to owe. Filing sets your record straight; payment is not due until the deadline.
