Between January and April 2026, the IRS Criminal Investigation division identified $4.5 billion in tax fraud, a 111.8% surge over the prior fiscal year. Monthly tax scam reports jumped 62% from 2024 to 2025, and since 2020, overall tax scam reporting has climbed more than 323% according to BBB Scam Tracker data. The average victim who loses money to these schemes doesn’t lose a few hundred dollars. They lose $32,000.
That’s the landscape heading into the 2026 filing season. And the scams hitting taxpayers this year look nothing like what most people expect.
How IRS Phone Scams Work in 2026 (AI-Powered Caller ID Spoofing)
The IRS placed AI-enabled phone impersonation as the #2 threat on its 2026 Dirty Dozen list, behind only phishing emails. That ranking reflects a shift that caught many taxpayers off guard: scammers don’t just spoof caller ID numbers anymore. They clone voices.
AI voice cloning tools can now replicate a person’s speech patterns, accent, and emotional tone from just 3 to 10 seconds of recorded audio. Scammers pull those clips from social media videos, voicemail greetings, and public recordings. The result is a call that sounds indistinguishable from a real IRS agent, a real police officer, or even a real family member.
Here’s what a typical 2026 IRS phone scam looks like in practice:
Your phone rings. The caller ID displays a legitimate IRS collection number. The voice on the other end identifies themselves with a badge number and title. They tell you there’s an outstanding tax debt, that a warrant has been issued, and that local law enforcement is en route. They demand immediate payment through gift cards, prepaid debit cards, wire transfer, or cryptocurrency.
What makes this harder to detect in 2026 is the sophistication. These AI-generated calls include natural pauses, filler words like “um” and “uh,” and even background office noise. One in four Americans has received an AI-generated deepfake voice call in the past year. Another 24% admit they can’t tell the difference between a cloned voice and a real person.
The critical fact to remember: The IRS will almost never call you as a first point of contact. Their standard procedure is to send written correspondence by mail to the address on your most recently filed return. The IRS does not leave threatening prerecorded messages, demand immediate payment over the phone, or threaten arrest.
IRS Email and Text Scams (Phishing and Smishing)
Email and text phishing topped the IRS 2026 Dirty Dozen list as the #1 threat this filing season. The IRS reported over 600 social media impersonators during fiscal year 2025 alone, and the phishing campaigns targeting taxpayers have grown dramatically in scale and quality.
In February 2026, Microsoft Threat Intelligence tracked a single phishing campaign that hit more than 29,000 users across 10,000 organizations. 95% of the targets were based in the United States, with financial services making up 19% of recipients. These weren’t sloppy spam emails. They featured professional formatting, real IRS logos, and personalized details pulled from data breaches.
The most common phishing tactics in 2026 include:
Fake refund notifications. You receive an email or text claiming a refund is ready. The message includes a link or QR code directing you to a convincing replica of an IRS website where you’re asked to “verify” your identity by entering your Social Security Number, bank account information, and filing credentials.
Urgent account alerts. Messages warning that your tax account has “unusual activity” and needs immediate verification. These create panic and push recipients to click without thinking.
Tax preparer impersonation. Scammers pose as the taxpayer and send emails to their actual tax professional, requesting last-minute changes to direct deposit information. The preparer makes the change, files the return, and the refund goes directly to the scammer’s account. The taxpayer doesn’t discover the theft until weeks later when their expected refund never arrives.
QR code phishing. A growing tactic in 2026 where scam emails include QR codes instead of clickable links. These codes redirect to fraudulent sites that harvest personal information or install malware, including ransomware that locks you out of your own files and data.
The rule to follow: The IRS does not initiate contact through email, text message, or social media. If you didn’t start the conversation, it’s not the IRS. The IRS’s direct guidance is clear: never click links or open attachments from unexpected messages claiming to be from the agency.
The Tax Preparer Redirect Scam
This scam deserves special attention because it bypasses the taxpayer entirely. Here’s how it works.
Scammers obtain basic information about you, sometimes from data breaches, sometimes from your public social media presence. They then contact your tax preparer by email, impersonating you. The email requests a change to how your refund will be delivered, typically asking for a direct deposit to a different bank account or payout to a prepaid debit card.
Because the request seems routine and comes from what appears to be the client’s email, many preparers process the change without a second thought. The return gets filed. The refund gets sent. And by the time you realize what happened, the money is gone. Recovery is difficult and sometimes impossible.
How to prevent this: Have a direct conversation with your tax preparer at the start of filing season. Agree on your refund delivery method and establish a verification protocol. Any change requests should be confirmed by phone call or in-person meeting, not email alone.
What Happens When You Fall Victim
The financial damage is often just the beginning. When a scammer steals your tax refund or tricks you into a payment, the IRS still considers your tax obligation unpaid. You’re now responsible for resolving a balance you don’t actually owe, and the process of proving fraud and recovering funds can take months.
Identity theft compounds the problem. If a scammer files a fraudulent return using your Social Security Number before you file your legitimate one, the IRS will reject your real return as a duplicate. Resolving identity theft with the IRS requires filing Form 14039 (Identity Theft Affidavit), and resolution timelines regularly stretch beyond 180 days.
17% of U.S. adults reported encountering a tax-related scam in 2025. That’s roughly one in five taxpayers directly targeted. The ones who engaged lost an average of $32,000. And imposter scams, the category these fall under, jumped 19% to approximately 1 million reported cases in 2025 alone according to the FTC, with total losses exceeding $3.5 billion.
7 Ways to Protect Yourself From IRS Scams in 2026
- Remember the IRS’s contact protocol. First contact from the IRS comes through U.S. mail. They don’t call, email, or text you first. They don’t demand immediate payment. They don’t threaten arrest. If someone does any of these things, it’s not the IRS.
- Never pay through gift cards, prepaid debit cards, wire transfers, or cryptocurrency. The IRS accepts payments through IRS.gov/payments, by check mailed with a payment voucher, or through an approved payment plan. No legitimate IRS agent will ever request payment through untraceable methods.
- Verify before you trust. If you receive a call claiming to be the IRS, hang up. Call the IRS directly at (800) 829-1040 to check your account status. Don’t use any phone number the caller provides.
- Type, don’t tap. When you receive a text or email that claims to be from the IRS, don’t click any links. Open your browser and manually type IRS.gov. Go to the source directly.
- Report suspicious contact. Forward suspicious emails to phishing@irs.gov. Report phone scams to the Treasury Inspector General for Tax Administration (TIGTA) at 1-800-366-4484 or online at tigta.gov. You can also report to the FTC at ReportFraud.ftc.gov.
- Set up an IRS Identity Protection PIN. Visit irs.gov/identity-theft-fraud-scams/get-an-identity-protection-pin to obtain a unique six-digit number that prevents anyone else from filing a tax return using your Social Security Number. This is free and available to all taxpayers.
- Establish a verification protocol with your tax preparer. Agree upfront on your refund delivery method. Set a rule that no changes to bank account information, refund method, or filing details will be processed without verbal confirmation by phone or in person.
How to Know It’s Really the IRS
Understanding how the IRS actually operates is the strongest defense against impersonation scams.
The IRS will contact you by mail first in nearly every situation. If you owe a balance, you’ll receive a written notice at the address on your most recent tax return. That notice will include the amount owed, an explanation of why it’s owed, and instructions on how to pay or dispute the amount.
The IRS will not call you to demand immediate payment. The IRS will not threaten to bring in local law enforcement. The IRS will not ask for credit or debit card numbers over the phone. The IRS will not send unsolicited emails or texts. The IRS will not contact you through social media.
If you receive a notice from the IRS by mail and aren’t sure whether it’s legitimate, you can verify it by calling (800) 829-1040 or by visiting irs.gov/notices. Every legitimate IRS notice has a notice number in the upper right corner that you can reference when calling.
FAQs
What is the IRS Dirty Dozen for 2026?
The IRS Dirty Dozen is the agency’s annual list of the 12 most prevalent tax scams. The 2026 list, released on April 3, 2026, is led by email and text phishing (including QR code-based attacks) and AI-enabled phone impersonation using voice cloning and spoofed caller IDs. The full list also includes fake charities, misleading social media tax advice, ghost tax preparers, and overstated withholding credit schemes.
Does the IRS call you by phone?
The IRS may call in rare, specific situations, such as following up on an audit or confirming a payment arrangement already established by mail. They will never call as a first contact, demand immediate payment, threaten arrest, or request payment through gift cards or cryptocurrency. If the IRS needs to reach you, they send a letter first.
What should I do if I think I’ve been scammed?
Contact your tax professional immediately. File a report with the FTC at ReportFraud.ftc.gov and with TIGTA at 1-800-366-4484. If your Social Security Number was compromised, file Form 14039 (Identity Theft Affidavit) with the IRS and consider placing a fraud alert on your credit reports through all three bureaus (Equifax, Experian, TransUnion). Request an IRS Identity Protection PIN to prevent future fraudulent filings.
Can scammers spoof real IRS phone numbers?
Yes. Caller ID spoofing technology, which uses VoIP platforms to display any phone number on the recipient’s screen, is widely available. A call showing a legitimate IRS number on your caller ID is not proof that the IRS is calling. Always hang up and call the IRS directly at (800) 829-1040 to verify.
How do I report a suspicious IRS email or text?
Forward suspicious IRS-related emails to phishing@irs.gov. For suspicious text messages, take a screenshot and email it to the same address. Do not click any links or open any attachments before forwarding.
Recent Comments