Every year, millions of Americans are targeted by scammers impersonating the Internal Revenue Service. These criminals use phone calls, emails, text messages, and even AI-generated voices to trick people into handing over money or sensitive personal information. The IRS's 2026 Dirty Dozen list highlights the most dangerous tax scams currently in circulation -- and many of them are more sophisticated than ever before. Here is what you need to know to protect yourself, your family, and your finances.
The IRS Will Never Do These Things
The IRS will never call you to demand immediate payment. It will never threaten you with arrest, deportation, or license suspension. It will never ask you to pay via gift cards, wire transfers, or cryptocurrency. It will never send unsolicited emails or text messages asking you to click a link or provide personal information. The IRS initiates most contact through official mail delivered by the U.S. Postal Service. If someone claiming to be the IRS does any of the above, it is a scam.
The Most Dangerous IRS Scams in 2026
1. Phishing Emails and Text Messages
Phishing remains the most widespread IRS scam. Criminals send emails or text messages that appear to come from the IRS, often using official-looking logos, formatting, and language. These messages typically claim there is a problem with your tax return, your refund is being held, or you need to "verify" your identity. They include links that lead to fake IRS websites designed to harvest your Social Security number, bank account information, and other sensitive data. Some messages now include QR codes instead of traditional links, making them harder for spam filters to detect.
How to protect yourself: Never click links in unsolicited emails or texts claiming to be from the IRS. The IRS does not initiate contact by email or text message. If you receive a suspicious message, forward it to phishing@irs.gov and delete it.
2. AI-Powered Phone Scams
The 2026 Dirty Dozen list highlights a growing threat: AI-enabled IRS impersonation by phone. Scammers now use robocalls, AI voice mimicry, and spoofed caller IDs to make calls that appear to come from legitimate IRS phone numbers. The caller may sound professional and authoritative, threatening arrest, wage garnishment, or deportation unless you pay immediately. Some scammers even use AI to clone the voices of real IRS agents or authority figures.
How to protect yourself: If you receive a threatening call from someone claiming to be the IRS, hang up. Do not engage, do not provide any information, and do not make any payment. If you believe you may owe taxes, contact the IRS directly at 1-800-829-1040 or visit IRS.gov to check your account.
3. Identity Theft and Fraudulent Tax Returns
Tax-related identity theft occurs when someone uses your stolen Social Security number to file a fraudulent tax return and claim your refund. Victims often discover the theft only when they try to file their own return and it is rejected because a return has already been filed under their SSN. In other cases, criminals attempt to gain unauthorized access to a taxpayer's IRS online account using stolen personal information.
How to protect yourself: File your tax return as early as possible each year -- the earlier you file, the less time a criminal has to file a fraudulent return using your information. Use strong, unique passwords for your IRS online account and enable multi-factor authentication. Monitor your IRS account for any suspicious activity.
4. Fake Tax Preparers and "Ghost" Preparers
Fraudulent tax preparation services are a persistent problem. Some create professional-looking websites, advertise "guaranteed" refunds, and collect sensitive information like Social Security numbers and bank details. "Ghost" preparers file returns for clients but refuse to sign the return or include their Preparer Tax Identification Number (PTIN), making them impossible to trace when problems arise.
How to protect yourself: Only use IRS-authorized e-file providers or certified tax professionals. Verify your preparer has a valid PTIN. Any legitimate tax preparer will sign your return and provide their PTIN. Be wary of anyone who guarantees a specific refund amount before reviewing your documents.
5. Refund and Credit Scams
Scammers may contact you claiming you are eligible for special tax credits or inflated refunds. These schemes often target specific groups -- seniors, low-income taxpayers, recent immigrants -- and promise money that sounds too good to be true. Some involve filing fraudulent claims for credits like the Employee Retention Credit or Fuel Tax Credit that the taxpayer does not qualify for.
How to protect yourself: Be skeptical of anyone who contacts you unsolicited to claim you are owed money. Verify any tax credit claims through IRS.gov or with a trusted tax professional. Remember: if a tax preparer inflates your return, you -- not the preparer -- are legally responsible for the accuracy of what is filed.
Get an IRS Identity Protection PIN (IP PIN)
One of the most effective steps you can take is to request an Identity Protection PIN from the IRS. An IP PIN is a six-digit number assigned to you that prevents anyone else from filing a tax return using your Social Security number. You can request an IP PIN through your IRS online account at IRS.gov. The IRS issues a new IP PIN each year, and it must be included on your tax return for the return to be accepted. This single step can prevent the most common form of tax-related identity theft.
Why Your Personal Data Makes You a Target
IRS scams rely on personal information to be convincing. The more a scammer knows about you -- your full name, address, date of birth, Social Security number, employer, and filing history -- the more effectively they can impersonate the IRS or file a fraudulent return in your name. Much of this information is readily available through data broker sites, which aggregate and sell personal data scraped from public records, social media, commercial databases, and data breaches.
This is where proactive privacy protection makes a meaningful difference. PrivacyOn removes your personal information from over 100 data broker sites, reducing the amount of data criminals can use to target you. With 24/7 monitoring and dark web scanning, PrivacyOn alerts you if your information appears where it should not. Family plans cover up to 5 people starting at $8.33 per month, making it practical to protect your entire household during tax season and beyond.
What to Do If You Are a Victim
If you believe you have been targeted by an IRS scam or are a victim of tax-related identity theft, take these steps:
- Report the scam: Forward suspicious emails to phishing@irs.gov. Report phone scams to the Treasury Inspector General for Tax Administration (TIGTA) at 1-800-366-4484. Use the IRS's online tip tool at IRS.gov/SubmitATip.
- File an identity theft affidavit: If someone has filed a fraudulent return using your SSN, submit IRS Form 14039 (Identity Theft Affidavit) to alert the IRS.
- Place a fraud alert: Contact one of the three major credit bureaus (Equifax, Experian, or TransUnion) to place a fraud alert on your credit file. The bureau you contact is required to notify the other two.
- Monitor your accounts: Check your bank accounts, credit reports, and IRS online account for unauthorized activity. Consider placing a credit freeze if you suspect your SSN has been compromised.
- File a report with the FTC: Visit IdentityTheft.gov to create a recovery plan and file a report with the Federal Trade Commission.
Protecting Yourself Year-Round
IRS scams are not limited to tax season. Criminals operate year-round, and the personal data that makes these scams possible is available 365 days a year. Here are habits that will keep you safer:
- File early. The sooner you file, the less time criminals have to file a fraudulent return using your information.
- Use an IP PIN. Request one through your IRS online account every year.
- Monitor your credit. Check your credit reports regularly for accounts you did not open.
- Limit your data exposure. Use a data removal service like PrivacyOn to reduce the personal information available to criminals on data broker sites and the dark web.
- Stay informed. Review the IRS Dirty Dozen list each year at IRS.gov to learn about the latest scam tactics.
- Use strong authentication. Enable multi-factor authentication on your IRS online account, email, and financial accounts.
The Bottom Line
IRS scams succeed because they exploit fear, urgency, and the vast amount of personal data available about each of us online. The best defense combines awareness -- knowing how the IRS actually communicates and what legitimate requests look like -- with proactive steps to reduce your exposure. Get an IP PIN, file early, and take control of your personal data before criminals can use it against you. A few simple precautions can mean the difference between a routine tax season and a devastating financial loss.