In this article:
In this article:
Criminals use the stress of dealing with the IRS to commit tax refund fraud and even steal your identity. Here’s how to protect yourself, today.
In this article:
In this article:
Tax refund scams are quickly becoming one of the most common ways thieves steal your money and even your identity.
Criminals prey on the stress of paying taxes or talking to the Internal Revenue Service (IRS) to steal sensitive information and file fraudulent tax returns. And the problem is only getting worse.
The IRS flagged 2.4 million tax returns for potential identity theft and fraud in 2023 alone — with fraudulent returns totalling $13.8 billion [*].
Few of us are tax experts. So how do you spot a tax refund scam, IRS imposter, or the many other ways criminals take advantage of tax season to steal from you?
{{show-toc}}
Tax refund scams are a type of financial fraud where criminals impersonate IRS agents or other government representatives and attempt to trick you into sending them personal information or giving them access to your tax refund.
Tax scams are lucrative for scammers because few of us have experience dealing with the IRS. And once they have your information, it opens the door to other frauds and even identity theft.
Thieves can collect payment posing as the IRS or charge for fake services. They can file claims in your name and collect a refund from the government. And they can use or sell your personal information on the Dark Web for tax-related identity theft.
How it works: Phishing is a type of scam email designed to steal your personal information. Scammers will send you an email pretending to be from the IRS, often with threatening or urgent subject lines demanding payment.
When you click on the link in a phishing scam, you’ll end up on a page that looks like the IRS website. But it's a hoax. Any information you give them – your Social Security number or credit card numbers — goes straight to the scammer. You could even end up with malware on your device that can steal your information or let scammers hack your email without you even knowing.
During the 2023 tax season, Aura's Smart Network saw a 2,700% increase in fake tax-related websites [*].
How to avoid it: Check the “From” name before clicking any link in an email. Scammers will change their names to look like they’re coming from the IRS or another agency. But if you hover over or click on their name, it will reveal their actual email. If it’s not from a .gov address, it’s a scam.
For added protection, use a VPN with Antivirus to protect your devices and home network from viruses and malware.
How it works: Scammers use bots and robocallers to send thousands of calls at once pretending to be from the IRS. When you answer, they’ll say you owe taxes, demand payment immediately, and may threaten your arrest if you don't pay. They may even try to steal your Child Tax Credit with information they trick you into sharing.
But any money or information you give up goes to a crook, not the IRS.
How to avoid it: Phone scams can pretend to be from the official IRS phone number, so don’t trust caller ID. The caller may give you a badge number, which can be fake, or even know your SSN, which can be stolen.
If you get a call from someone saying they’re with the IRS, ask for a reference number. Then, hang up and call back using one of the official IRS phone numbers.
📚 Related: Child Identity Theft: The Parental Guide to Protecting Your Kids →
How it works: In 2022, there were 7.8 million reports of tax-related suspicious activity [*]. Tax identity theft occurs when, without your knowledge, someone submits a tax filing under your name. Surprisingly, this doesn't require any tax documents — all a thief needs are your name, Social Security number, and date of birth.
The fraudulent return will show a large refund, which the thief will deposit. When you go to file your taxes, you'll get an alert from the IRS that someone else has already filed as you.
While you're still legally eligible for your refund, the process to confirm your identity is complicated. And the thief has your personal information.
How to avoid it: Set up an Identity Protection PIN (IP PIN). This is a voluntary step the IRS offers to secure your return. You’ll set up a new six-digit passcode each year you’ll use to send in your returns. This serves as a password to verify your real identity and prevent an impostor from filing in your name. You can set one up at the official IRS IP PIN page.
How it works: Scammers will make bold threats to try and get you to send them the information they want. In this scam, a fraudster will claim your Social Security Number has been or will be revoked or suspended due to some tax issue.
How to avoid it: Hang up, delete the email, and ignore the scam. Your Social Security number can't be suspended, canceled, frozen, or revoked.
The big picture: Protect your sensitive information like your Social Security number as much as possible — even just the last four digits. Avoid giving it out whenever possible, and never share it with someone who calls you.
A SSN Monitoring service can help alert you if someone is using your Social Security number without your consent.
How it works: A scammer posing as a tax preparer pretends to file your taxes. But they may use exceptions that don't apply, leave mistakes on your return, or even turn around and file a fraudulent return in your name.
How to avoid it: Only provide personal or tax information to a verified tax preparer you’ve chosen to work with. All verified tax preparers have an IRS Preparer Tax Identification Number (PTIN) which you can request. You can also search for them in the official IRS directory.
How it works: If you get an email from the IRS demanding you send a tax form, beware. There are several legitimate forms taxpayers may need to fill out, but most of these (including W-9 for freelancers and W-4 forms for employees) are sent to companies and never to the IRS.
How to avoid it: Ignore the message and report the fraud to the IRS. The IRS won’t contact you by email, so any request for forms like this is an example of fraud.
How it works: In this scam, you receive a message (typically an email) saying the IRS has recalculated your return and you're owed an extra refund.
But to get the money, you'll need to click a link and confirm personal or financial information. This is a classic example of phishing — there is no extra refund, and the information goes straight to identity thieves.
How to avoid it: Don’t trust emails that claim to come from the IRS. If they need to contact you, they’ll do so first with a letter. If you’re curious about the state of your return, you can use the IRS’ Where’s My Refund? tool.
How it works: The pandemic has opened up new opportunities for Covid-related scams. Some of the more common scams are PPP fraud and people claiming you're due extra or overdue stimulus payments or unemployment checks.
This message will either ask you to click a link and “verify” your personal information or tell you to pay a fee to receive payments. But in both cases, the information or money goes to a tax scammer instead.
How to avoid it: Remember that the IRS will never contact you over email. Instead, log into your IRS account to see the status of your benefits.
📚 Related: Someone Claimed Unemployment in My Name. What Should I Do? →
How it works: Scammers can also pretend to be from real or fake tax agencies on the phone. For example, the Taxpayer Advocate Service or the Bureau of Tax Enforcement.
The Taxpayer Advocate service is real, but doesn’t call taxpayers without reason. The Bureau of Tax Enforcement is not a real organization.
How to avoid it: Don’t trust unsolicited calls from people claiming to be from government agencies. Get a reference number, hang up, and call back from an official phone number.
How it works: This scam happens after you receive a direct deposit refund — either real or fraudulent. You’ll get a call or text from someone posing as an IRS agent [*]. They’ll claim your refund was too high, and you’ll need to return the extra money, usually via wire transfer or gift cards.
How to avoid it: Be wary of sending money to agencies through means that can’t be reversed. While there are times when you’ll need to pay back an accidental refund, the IRS will let you know by mail and will accept multiple payment methods.
How it works: Offer in Compromise is a legitimate program by the IRS to help those struggling to pay tax debt. But it’s only available for taxpayers who meet a specific set of criteria. Scammers will make big promises and charge for “assistance” to apply to the program, even if you’re ineligible.
How to avoid it: Before applying to the Offer in Compromise program, use the IRS’ free OIC pre-qualifying tool.
How it works: A scammer may call — or answer the phone if you return a threatening message or text — and demand payment for penalties or overpaid taxes in gift cards, like those from iTunes or Amazon, or cryptocurrency, like Bitcoin.
How to avoid it: Ignore the threats. The IRS doesn't accept gift cards or cryptocurrency as payment, so anyone asking is a scammer.
Did you know? Some crypto scams to watch out for include fake crypto websites that steal your investments, “pump-and-dump” schemes, and phishing attacks designed to gain access to your crypto wallet and transfer out your coins. Read about more examples of fraud here. →
How it works: The W8-BEN is a legitimate IRS form for non-US workers. But scammers will request you fill out a fraudulent version of the form that includes extra information like your passport number, bank account information, and more.
How to avoid it: Avoid downloading attachments (even PDFs) as they can contain malware. If you need to fill out any form, download it directly from the IRS forms resource.
Dealing with the IRS can be scary. But if you understand how they normally reach out to taxpayers, you can quickly recognize if someone isn’t who they say they are.
First, remember that nearly all legitimate IRS communication comes as physical mail sent through the U.S. Postal Service.
If you have several years of unpaid taxes and have not responded to multiple letters, the IRS may call you or visit in person. During the call, the agent will introduce themselves by name and will never threaten or demand immediate payment. If an agent visits in person, they will have a government ID badge known as an HSPD-12.
If you’re still unsure whether someone is an IRS scammer, there are a few other warning signs to look for:
If you think you’ve been targeted by a tax scammer, look for the warning signs of identity theft from tax fraud:
Lastly, tax fraudsters might leak your personal information onto the Dark Web. If your personal information is available on the Dark Web, you are at higher risk for tax scams. Use the Aura Dark Web Scanner to learn if your information has been exposed.
If you think you might be a victim, here are the most important steps you should take.
You should also follow the steps in the fraud victim's checklist and report the fraud. Forward scam emails to phishing@irs.gov. Forward scam text messages to 202-552-1226, then send a text sharing the number that contacted you.
If you’re the victim of identity theft, you should also file a report with the FTC at IdentityTheft.gov and the Treasury Inspector General for Tax Administration (TIGTA).
Then, take steps to protect your identity. A fraudulent tax return means the thief has your personal information, including your Social Security number. (Be especially careful here as it can be incredibly difficult to change your Social Security number, even after identity theft.)
Set up a fraud alert or credit freeze at the three credit bureaus. Protect your accounts using strong, unique passwords and two-factor authentication.
Even if you've resolved a tax scam, you should consider identity theft protection as criminals can use your information to open fraudulent loans, commit bank scams, change your address and steal your mail, or even commit crimes using your name.
Aura monitors your bank account, financial information, and other sensitive information for fraud. We’ll let you know of any suspicious activity and if anyone is trying to use your identity without your permission.
And if the worst happens, you’re covered by a $1 million ID theft insurance policy for eligible losses due to identity theft.
If you think you owe the IRS money, check directly with them (for free).
If you do owe back taxes, you can work directly with the IRS and either send them money or sign up for an installment plan to pay them back over time.
Tax season is full of scams. But with a bit of diligence, you can spot an IRS imposter and protect your money and sensitive information.
For added protection and to prevent identity theft, make sure you file your taxes early. The sooner you file, the less time you give fraudsters to impersonate you. If you work with a tax preparer, vet them properly and avoid anyone who claims they’ll be able to get you a large refund (before seeing your information).
And for ultimate peace of mind, consider Aura’s identity and financial fraud protection service.
Editorial note: Our articles provide educational information for you to increase awareness about digital safety. Aura’s services may not provide the exact features we write about, nor may cover or protect against every type of crime, fraud, or threat discussed in our articles. Please review our Terms during enrollment or setup for more information. Remember that no one can prevent all identity theft or cybercrime.