IRS Scam Alert:
Fake Letters Targeting Crypto Holders & Other 2026 Threats

As a business owner or individual taxpayer, you're a prime target for scammers trying to steal your money, your identity, and now your digital assets. And the threats are getting more sophisticated — this isn't the era of the obvious typo-ridden email anymore. We're seeing a surge in highly convincing, fraudulent IRS communications, including a new physical-letter scam aimed squarely at cryptocurrency holders, plus AI-powered phone calls that sound genuinely real.

Here's the plain-English rundown of what's circulating in 2026, how each scam actually works, and — most importantly — the simple rules that keep you and your business safe. Spotting fraud used to be part of my job on the banking side of the table, and the good news is that almost every one of these scams collapses the moment you know one or two facts about how the IRS really operates.

By Carrie Anderson — Co-Founder, 406 Consulting Group. Commercial banking and underwriting background — 300+ loan reviews, and years spent spotting fraud and identity theft — now protecting business owners and taxpayers across the Mountain West and Southwest.

Scammers follow the money, and business owners sit right in the sweet spot: you move larger dollar amounts, you file more kinds of returns, you have an EIN and payroll and vendors, and you're busy enough that a well-timed "urgent" notice can slip past your guard. Add a crypto wallet or two and you become even more attractive, because digital assets can be drained in minutes and are far harder to claw back than a reversed bank transfer.

The scammers' entire playbook runs on two emotions: urgency and fear. A deadline that's about to pass. A threat of arrest. A refund you'll lose if you don't act now. The moment you feel that jolt of panic, that's the signal to slow down — because the real IRS almost never operates that way. Everything below is really just teaching you to recognize the difference between manufactured urgency and how a tax agency actually behaves.

Let's start with the newest and most alarming one — because it arrives in your physical mailbox, where most people don't expect a scam at all.

Federal fraud investigators and the tax community have been warning about a sophisticated scam targeting digital-asset holders — and what makes it dangerous is that it comes as a realistic, physical letter that looks like an official IRS notice. People have learned to distrust surprise emails and texts, but a printed letter in the mailbox still carries an air of authority, and the scammers are counting on exactly that.

The letter claims you must immediately enroll in a "Digital Asset Compliance Portal" before a strict deadline, and it includes a QR code. Scan that code and you land on a website built to look exactly like IRS.gov. The fake site then asks for your personal information, your cryptocurrency wallet details, and your exchange account credentials. Hand those over and the scammers drain your wallets and steal your identity — often within minutes, and usually with no way to reverse it.

If a letter with a QR code demands crypto "compliance," do not scan it. Stop, don't respond, and call your tax professional — you can independently verify any real notice by logging into your own IRS.gov account or calling the IRS directly using the number on IRS.gov, never a number or link the letter gives you.

This is the one that catches even careful people in 2026. Scammers now use artificial intelligence for voice mimicry and spoofed caller ID, so your phone can genuinely display "IRS" and the voice on the line can sound calm, official, and human. They leave urgent, threatening voicemails demanding immediate payment or warning that arrest is imminent if you don't call back.

If you get one of these calls, hang up. Don't press a button, don't call the number back, and don't "just confirm" anything — engaging at all tells the scammers your line is live.

Phishing (fake emails) and smishing(fake text messages) are the volume plays — cheap to send by the million and effective on a small percentage. The messages appear to come from the IRS and lean on the same two levers: alarming language ("your account is on hold," "final notice") or an irresistible carrot ("you have an unclaimed refund"), always with a link to "verify" your account.

Forward suspicious IRS-themed emails to phishing@irs.gov and then delete them — we'll cover the full reporting steps below.

Not every scam comes from a stranger — some sit across the desk from you at tax time. A "ghost" preparer prepares your return but refuses to sign it or provide a valid Preparer Tax Identification Number (PTIN). They often dangle inflated refunds and charge a fee based on a percentage of that refund — a giant red flag on its own.

This is the whole reason working with a real, accountable firm matters: we sign every return we prepare, we stand behind the numbers, and our name is on it right next to yours.

Social media is awash in confident-sounding advice promoting a broad "self-employment tax credit" that supposedly generates a massive refund — just file for it. It's a close cousin of the earlier wave of bad Employee Retention Credit advice: a real, narrow provision gets stretched into a viral "everyone qualifies" hack by people who make money whether or not your claim holds up.

There genuinely are credits and strategies that can cut your bill — but they come from a real analysis of your situation, which is exactly what our tax-planning work is built to do.

Almost every scam above dies the moment you hold it up against how the IRS really behaves. Memorize this short list and you've inoculated yourself against most tax fraud:

If a communication lands on the wrong side of that table, treat it as a scam until you've independently confirmed otherwise through IRS.gov or your tax professional.

Business owners face a whole category of scams that individuals don't, and they're often aimed not at you but at your team. The classic is the W-2 / payroll phishing attack: a scammer emails someone in HR or payroll, posing as you or another executive, and urgently requests copies of employee W-2s or a change to direct-deposit details. One rushed reply can expose your entire staff's Social Security numbers or reroute a payroll run to a criminal's account.

Business identity theft is the other big one — criminals use a stolen EIN to file fraudulent returns, open lines of credit, or claim bogus refunds in your company's name. Because businesses move bigger numbers and file more forms, the payoff is larger and the damage can take months to unwind. The defenses are practical: verify any internal request for W-2s or banking changes by phone before acting, lock down who can authorize payment or payroll changes, guard your EIN like a password, and reconcile your accounts and IRS notices promptly so a fraudulent filing surfaces fast.

Clean books and a tight monthly close aren't just good accounting — they're fraud detection, because they make an unexpected transaction or filing impossible to miss.

Vigilance beats any single tool. Five rules cover the vast majority of tax fraud:

None of these require technical skill — just the habit of slowing down when something feels urgent.

If you receive a suspicious letter, email, call, or text claiming to be from the IRS — especially one involving cryptocurrency or demanding immediate payment — do not engage. Don't scan, don't click, don't call back, don't reply. Then take these steps:

If you think you've already given up information — wallet keys, credentials, or your SSN or EIN — act fast: move assets from a compromised wallet, change credentials, alert your bank and exchanges, and consider an IRS Identity Protection PIN. Speed matters, and it's exactly the moment to call a professional rather than face it alone.

FAQ: IRS Scams in 2026