Tax Scams

Tax scams are frauds built around the tax system, using the authority of the IRS or the mechanics of filing as the reason the target should act. They divide by what the fraudster is actually after: a refund, whether by filing a return in your name or by inflating the one you file; your identity, harvested from the unusually complete personal and financial data a return contains; or money, sent directly to someone posing as the IRS or as a service that will resolve a tax problem. The IRS publishes an annual list of the schemes it is seeing, which it calls the Dirty Dozen, and it has issued that list for more than two decades.

The Dirty Dozen is a warning list, not a definition. The IRS announced its 2026 list in IR-2026-30 on March 5, 2026, and that release records that the list changes: it names the addition of abusive undistributed long-term capital gains claims as item 6, replacing a prior year's fuel tax credit concerns. So the useful thing to know about the list is its shape rather than its contents. It mixes schemes aimed at the general public, such as impersonation and phishing, with promoted positions aimed at people with more complex returns, and with bad preparer behavior. The IRS also publishes it alongside two related efforts: the Security Summit, which the agency describes as a partnership among the IRS, state tax agencies and the tax industry, and National Slam the Scam Day, held March 5.

How the IRS actually initiates contact, which is where popular advice goes wrong. The IRS's own page on the subject states that it normally contacts a taxpayer the first time by mail delivered by the Postal Service, and that some letters are sent by the private collection agencies it uses. On the other channels it is more specific than the folk rules suggest. It sends email only to people who have opted in, and account notifications come from an address ending in irs.gov. It sends text messages only to people who have opted in. It states flatly that a social media direct message is never from the IRS. It may send a fax to verify or request employment information. And on the phone: the IRS or a private collection agency "may call you to address account matters," and "in some cases, we use automated phone messages" that direct the recipient to IRS.gov rather than sharing specific details. In-person visits are described as uncommon, usually preceded by a letter, and limited to four types of IRS employee.

So "the IRS never calls" and "any recorded IRS message is a scam" are both wrong, and a reader who relies on them will either ignore a real call or feel safe because a scam call sounded official. The version that holds up is the one the IRS itself puts in the Dirty Dozen release: the IRS generally contacts taxpayers by mail first and "does not leave urgent, threatening prerecorded messages, call to demand immediate payment, or threaten arrest."

Mail is not a guarantee either. The IRS's tax scams page warns that fraudsters are mailing fake IRS letters that direct recipients to a fraudulent site imitating IRS.gov and instruct them to register for a "Digital Asset Compliance Portal," which the agency says it does not operate. On disaster scams the same page notes that impersonators call disaster victims offering to help file casualty loss claims, and that the IRS does not call without notifying by mail first. The practical rule that survives both directions is that the channel is weak evidence and the content is strong evidence. Demands for immediate payment, threats of arrest, pressure to act within minutes, requests for account or card numbers, and any instruction to pay by gift card, wire or cryptocurrency are the reliable signals, whatever envelope or number they arrive in.

What the categories look like from the reader's side. Refund-directed scams include someone filing a return in your name before you file, and a preparer claiming credits you do not qualify for so that a larger refund arrives, part of which they keep. Identity-directed scams include phishing messages that imitate the IRS or a tax software company, and offers to "help" with your IRS online account, which is a request for the credentials to it. Money-directed scams include impersonation calls and letters demanding payment, and promoted schemes that sell a tax position rather than a product, where the fee is real and the deduction is not.

Where the reader is left holding the consequence. Two features of the tax system make these frauds unusually costly. A tax return is a single document containing a Social Security number, an address, employer information, dependents' identifying numbers and bank account details, so one successful theft supplies years of fraud. And the taxpayer is legally responsible for what is on a return filed in their name, so a position someone else put there is still theirs to unwind, with interest.

Most tax scams follow the same shape, whatever channel they arrive by.

1. A pretext borrowed from the tax system. An unpaid balance, a suspended Social Security number, a refund awaiting release, a credit you did not know you qualified for.
2. Urgency. A deadline measured in hours, a threat of arrest or seizure, or a filing season closing.
3. A request for something irreversible. Credentials, a Social Security number, an IP PIN, a signature on a blank form, or a payment by a method that cannot be recalled.
4. A channel chosen to look official. A caller ID showing a Washington area code, a spoofed irs.gov address, a mailed letter on letterhead, or a website that copies the real one.

What to do instead, in order, drawing on the routes the IRS publishes.

1. Stop and disengage. Do not confirm any personal detail to establish who is calling. Hang up or set the letter aside.
2. Verify independently. Look up the notice or letter number on IRS.gov, sign in to your own IRS online account by typing the address yourself, or call the IRS on a number you looked up rather than one you were given.
3. Report it by the right route. Suspected IRS-related phishing emails and messages go to [email protected]. Suspected tax identity theft goes to IRS.gov/idtheft. Other suspected tax fraud, scams or tax-related wrongdoing can be reported at IRS.gov/SubmitATip, which the IRS describes as consolidating its fraud-reporting options in one place and routing tips to the appropriate office.
4. File and pay as normal. A scam attempt does not change your own filing obligations, and delaying a return to deal with one usually makes things worse.

Pros

• The IRS publishes its current warning list annually and for free, so the schemes in circulation are documented rather than guessed at.
• The reporting routes are specific and separate, which means a report reaches people who work on that kind of case rather than a general mailbox.
• The strongest warning signs are about content rather than channel, so they do not go out of date as fraudsters change delivery methods.

Cons

• The most widely repeated defensive rules, particularly "the IRS never calls", are inaccurate, and relying on them cuts both ways.
• The IRS's own contact practices are genuinely varied, so no single simple rule separates real from fake.
• Some tax scams arrive as ordinary mail on convincing letterhead, which defeats the one heuristic most people do have.
• A taxpayer remains responsible for a return filed in their name, so unwinding someone else's fraud takes the victim's own time and often their own money.
• The annual list changes, so guidance written a year ago may describe schemes that have moved on.