{"id":8927,"date":"2026-02-10T12:00:00","date_gmt":"2026-02-10T10:00:00","guid":{"rendered":"https:\/\/blog.eset.ee\/et\/?p=8927"},"modified":"2026-06-14T19:58:27","modified_gmt":"2026-06-14T16:58:27","slug":"taxing-times-top-irs-scams-to-look-out-for-in-2026","status":"publish","type":"post","link":"https:\/\/blog.eset.ee\/et\/en\/2026\/02\/10\/taxing-times-top-irs-scams-to-look-out-for-in-2026\/","title":{"rendered":"Taxing times: Top IRS scams to look out for in 2026"},"content":{"rendered":"<p>To misquote Benjamin Franklin, nothing is certain in this world except for death, taxes and scammers. Unfortunately, with tax filing season now in full swing, the fraudsters are also out in force, doing their best to cash in. The risk of unwittingly sharing personal and financial information, enabling third parties to hijack your tax refunds, or even being tricked into committing fraud yourself, has grown immeasurably over recent years.<\/p>\n<p>To stay on the right side of the law, and keep the scammers at bay, read on.<\/p>\n<h2>How to spot the scams<\/h2>\n<p>Tax and IRS scams in general contain many of the same warning signs you should associate with other digital fraud types. Scammers may impersonate the IRS or tax preparers via phone\/email\/text, using official logos or spoofing caller ID\/sender domains. They may even demand money or fines. Or they could trick you into filing fraudulent returns. Whatever the pretext, chances are that the fraudsters could also leverage AI to supercharge their schemes.<\/p>\n<p>Just remember the following warning signs:<\/p>\n<ul>\n<li>An unsolicited email\/text\/call from the IRS. The tax-collection agency will always make contact initially via an official letter through the mail, not a text message.<\/li>\n<li>The IRS demands immediate payment to avoid arrest or further penalties. The IRS will always provide taxpayers time to appeal or query outstanding sums.<\/li>\n<li>Scammers will ask for payment by <a href=\"https:\/\/www.reddit.com\/r\/personalfinance\/comments\/8l1kxn\/i_almost_fell_for_an_irs_scam_yesterday\/\">unusual means<\/a>, such as gift card or cryptocurrency, which the IRS doesn\u2019t accept.<\/li>\n<li>You are ordered to share personal and\/or financial information like credit card numbers and banking logins. The IRS will never call, text or email asking for such details.<\/li>\n<li>With the rise of <a href=\"https:\/\/www.welivesecurity.com\/en\/social-media\/ai-aided-malvertising-chatbot-scams\/\">AI-aided scams<\/a>, your eyes and ears can no longer be trusted as primary authentication mechanisms. Remember that the IRS will never initiate unsolicited contact via email, text, or social media to ask for your personal or financial information.<\/li>\n<\/ul>\n<div>\n<blockquote>\n<p><em>RELATED READING: <a href=\"https:\/\/www.welivesecurity.com\/2020\/02\/27\/did-someone-file-your-taxes-before-you\/\">Did someone file your taxes before you?<\/a><\/em><\/p>\n<\/blockquote>\n<\/div>\n<h2>The most common IRS scams<\/h2>\n<p>With the above in mind, look out for the following most common IRS and tax return scams:<\/p>\n<h3>Phishing\/smishing\/vishing<\/h3>\n<p>Emails, texts and even phone calls purporting to come from tax authorities (e.g., IRS, state tax agencies and tax software companies). The end goal is to trick you into handing over cash, sensitive personal\/financial information, or installing malware on your device. The scammers may use a pretext such as an unexpected tax refund. Or they could go down a different route and claim your account has been suspended and\/or you will face serious repercussions unless you atone for \u2018unpaid taxes\u2019.<\/p>\n<p>Whatever the lure, they\u2019ll usually ask you to provide more information, send them money, and\/or click on a malicious link.<\/p>\n<figure><img decoding=\"async\" alt=\"irs-tax-scam-example-one\" height=\"\" src=\"https:\/\/web-assets.esetstatic.com\/wls\/2026\/02-26\/irs-tax-scam-example-one.jpg\" title=\"\" width=\"\"><figcaption><em>Source: <a href=\"https:\/\/www.reddit.com\/r\/Scams\/comments\/1itaq6g\/not_sure_if_this_text_from_the_irs_is_a_scam_or\/\">Reddit<\/a><\/em><\/figcaption><\/figure>\n<h3>Tax refunds<\/h3>\n<p>The IRS tax refund system offers several opportunities for scammers to make easy money. All they need is your personal information (including Social Security details, name and date of birth) to file, and deposit the refund in a bank account under their control. The first you might find out is when your legitimate filing is rejected because a return has already been sent in under your name.<\/p>\n<p>Alternatively, scammers impersonating the IRS might send you an unsolicited email\/text claiming you are owed a big rebate or refund. They\u2019ll ask you to visit a phishing website mirroring the IRS one to \u2018verify your account\u2019 details.<\/p>\n<figure><img decoding=\"async\" alt=\"irs-tax-scam-example-two\" height=\"\" src=\"https:\/\/web-assets.esetstatic.com\/wls\/2026\/02-26\/irs-tax-scam-example-two.jpg\" title=\"\" width=\"\"><figcaption><em>Source: <a href=\"https:\/\/www.reddit.com\/r\/Scams\/comments\/18upcia\/irs_tax_refund\/\">Reddit<\/a><\/em><\/figcaption><\/figure>\n<h3>W-2 form scams<\/h3>\n<p>A social media influencer advertises a \u2018secret trick\u2019 which you can use to game the tax system and get a large refund. All you have to do is create a fake W-2 form, report inflated earnings and large tax bills, and pay them a fee. By doing this, you are committing fraud and could face major financial penalties from the IRS, or even a criminal investigation. Even worse, as well as paying the scammer, you have also shared your personal and tax details, which they can use in follow-on fraud.<\/p>\n<h3>Self-employment tax credit<\/h3>\n<p>Also circulating on social media are claims made by scammers about a non-existent \u201cSelf-Employment Tax Credit.\u201d According to the IRS, they claim self-employed people and gig workers can get big COVID-19 payments by filling in the right forms. Once again, they do so to get their hands on your cash and personal information.<\/p>\n<h3>Dishonest tax preparers<\/h3>\n<p>It\u2019s also wise to be on the lookout for <a href=\"https:\/\/www.reddit.com\/r\/tax\/comments\/1lljuhh\/is_this_a_new_scam_people_offering_tax_services\/\">unscrupulous \u201ctax professionals\u201d<\/a> who may substitute their bank account information for your own in order to divert tax refunds. They might prepare a tax return but then charge a fee based on the size of the refund. Be suspicious of any that refuse to sign or include their IRS Preparer Tax Identification Number (PTIN).<\/p>\n<h2>What happens next?<\/h2>\n<p>If you suspect an IRS scam, the best thing to do is to halt all communications. That means hanging up the phone, and deleting any phishing email and\/or text. If you\u2019re talking to someone and aren\u2019t sure if they\u2019re the real deal or not, ask for their name and call back number and check the details online. Scam emails can be sent to <a href=\"mailto:phishing@irs.gov\">phishing@irs.gov<\/a> before deletion, while you can submit an official fraud report to the IRS <a href=\"https:\/\/www.irs.gov\/help\/report-fraud\/report-tax-fraud-a-scam-or-law-violation\">here<\/a>.<\/p>\n<h2>Staying safe from IRS scams<\/h2>\n<p>To avoid becoming another victim of scams like the ones listed above, stay on the lookout for the warning signs we\u2019ve included for you. Unsolicited contact, promises of large refunds, and threats of fines or arrest should be immediate red flags. Report the attempted scam and hang up or delete. It also pays to be cautious about any \u201ctax tricks\u201d or tips you might see on social media, especially if they involve paying fees to a third party or handing over any of your personal\/financial information.<\/p>\n<p>For added security and peace of mind, switch on multifactor authentication (MFA) for any account used to access tax and financial information. This should keep them safe even if threat actors get hold of your logins. An <a href=\"https:\/\/www.irs.gov\/identity-theft-fraud-scams\/get-an-identity-protection-pin\">IRS Identity Protection PIN (IP PIN)<\/a> may also be a good idea, to ensure no third party can file a return using your Social Security number (SSN) or individual taxpayer identification number (ITIN).<\/p>\n<p>Finally, consider filing your returns early \u2013 as soon as you receive your W-2 form. That way, scammers won\u2019t be able to beat you to a possible refund. None of these are guaranteed to stop the scammers. But combined, they will send a clear message.<\/p>\n<p class=\"wls-source\"><a href=\"https:\/\/www.welivesecurity.com\/en\/scams\/taxing-times-top-irs-scams-look-out-2026\/\" rel=\"nofollow noopener\" target=\"_blank\">Read the full analysis on WeLiveSecurity \u2192<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>It\u2019s time to file your tax return. And cybercriminals are lurking to make an already stressful period even more edgy.<\/p>\n","protected":false},"author":5,"featured_media":8928,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[147],"tags":[],"class_list":["post-8927","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybercrime"],"acf":[],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/posts\/8927","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/comments?post=8927"}],"version-history":[{"count":1,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/posts\/8927\/revisions"}],"predecessor-version":[{"id":9657,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/posts\/8927\/revisions\/9657"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/media\/8928"}],"wp:attachment":[{"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/media?parent=8927"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/categories?post=8927"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.eset.ee\/et\/en\/wp-json\/wp\/v2\/tags?post=8927"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}