DEFENSESTORM BLOG

Tax Season IRS Tips for Scams

Thursday, January 23rd, 2025

VIEW ALL INSIGHTS

Cyber security risk management solutions from DefenseStorm.

The IRS has already made several reminders for individuals to be aware of bad actors trying to take advantage of this season to gain access to your personal data and finances. Read tips and guidance taken directly from the IRS’ website, including associated links to stay safe during tax season.

With tax season upon us, the time for tax phishing and phone scams are also upon us. The IRS has already put out several reminders for individuals to be aware of bad actors trying to take advantage of this season to gain access to your personal data and finances. Below are some tips and guidance taken directly from the IRS’ website, including associated links. Remember, the IRS does not initially, key word initially, reach out or contact taxpayers by email, text messages, or social media channels. This includes requests for personal identification information, PINS, passwords, or similar access information for credit cards, banks, or other financial accounts.

The IRS will never:

  • Call to demand immediate payment using a specific payment method such as a prepaid debit card, gift card or wire transfer. Generally, the IRS will first mail a bill to any taxpayer who owes taxes.
  • Threaten to immediately bring in local police or other law enforcement groups to have the taxpayer arrested for not paying.
  • Demand that taxes be paid without giving taxpayers the opportunity to question or appeal the amount owed.
  • Call unexpectedly about a tax refund.

Taxpayers who receive these phone calls should:

What to do if you receive a suspicious IRS-related email

If you receive an email claiming to be from the IRS that contains a request for personal information, taxes associated with a large investment, inheritance, or lottery.

  1. Don’t reply.
  2. Don’t open any attachments. They can contain malicious code that may infect your computer or mobile phone.
  3. Don’t click on any links. Visit our identity protection page if you clicked on links in a suspicious email or website and entered confidential information.
  4. Forward – preferably with the full email headers – the email as-is to us at phishing@irs.gov. Don’t forward scanned images because this removes valuable information.
  5. Delete the original email.

What to do if you receive a suspicious IRS-related telephone call

IRS impersonation telephone calls – as well as other types of unwanted calls (e.g., telemarketing robocalls, fake grants, tech support, sweepstakes winnings, etc.) remain popular scams. Blocking these types of calls is one strategy taxpayers should consider. Easy to install call blocking software for smartphones is available. While the IRS does not endorse any solution or brand, a limited sample of the available options are:

If you receive a phone call from someone claiming to be from the IRS but you suspect they are not an IRS employee:

  • View your tax account information online or review their payment options at IRS.gov to see the actual amount owed
  • If the caller is an IRS employee with a legitimate need to contact you, please call them back using the appropriate online resources

If the individual is not an IRS employee and does not have a legitimate need to contact you and regardless of whether you were a victim of the scam or not, report the incident to the appropriate law enforcement agencies:

  • If IRS-related, please report to the Treasury Inspector General for Tax Administration (TIGTA) via their online complaint form.
  • If Treasury-related, please report to the Office of the Treasury Inspector General (TIG) via OIGCounsel@oig.treas.gov

Please report IRS or Treasury-related fraudulent calls to phishing@irs.gov (Subject: IRS Phone Scam).

For any fraudulent call, after listening to the message, do not provide any information and hang up. When you report the fraudulent call, please include:

  • The telephone number of the caller (e.g., Caller ID)
  • The telephone number you were instructed to call back
  • A brief description of the communication

If possible, please include:

  • The employee name
  • The employee badge number
  • The exact date and time that you received the call(s)
  • The geographic location and time zone where you received the call if possible

In addition, please consider filing a complaint with the:

  • Federal Trade Commission (FTC) via their online complaint form
  • Federal Communications Commission (FCC) by visiting the Consumer Complaint Center. Consumers should select the “phone” form and then the “Unwanted Calls” under “Phone Issues”, and provide details of the call in the description of their complaint
  • Your local Attorney General’s office via their consumer complaint form (the reporting mechanism will vary by state)

How do I verify contact from the IRS?

Go to IRS.gov and search on the letter, notice, or form number. Please be aware fraudsters often modify legitimate IRS letters and forms. You can also find information at Understanding Your Notice or Letter or by searching Forms and Instructions. For additional information please see “How to know it’s really the IRS calling or knocking on your door”.

If it is legitimate, you’ll find instructions on how to respond. If the completion of a form is required and it’s provided by a questionable contact, you should verify the form is identical to the same form on IRS.gov by searching Forms and Instructions.

If you don’t find information on our website or the instructions are different from what you were told to do in the letter, notice or form, please use the appropriate online resources.

Once you have determined that it is not legitimate, report the incident to TIGTA and to us at phishing@irs.gov.

Diana Rodriguez

Cyber Threat Intelligence Engineer

Diana Rodriguez is a Cyber Threat Intelligence Engineer for DefenseStorm. She joined DefenseStorm in 2019 with 9.5 years of experience in cybersecurity and banking. Diana’s career began at Wells Fargo where she played a pivotal role in protecting financial institutions. Over the 5 years with Wells Fargo, she held diverse positions there, first starting as a teller, then transitioning to become a financial crime analyst, and eventually a cyber security analyst. This experience provided her with a comprehensive understanding of the intricacies of the banking industry and the critical importance of cybersecurity in protecting sensitive data. Diana holds a Bachelor’s degree in computer science from UNCC and a Master’s Degree in Cybersecurity from UNC at Chapel Hill. She completed the MITRE ATT&CK® Defender certifications which provided her with the expertise to effectively apply knowledge of adversary behaviors, enhancing security configurations, analytics, and decision-making to provide the utmost protection for DefenseStorm’s clients. Diana also holds the GIAC Certified Incident Handler and NSE1, and NSE2. During her tenure at DefenseStorm, she has become proficient in the platform, taking an active role in proactively detecting and responding to cyber threats. She’s played a vital role in developing new policies and advanced analytics to detect and prevent potential attacks effectively while educating and empowering customers to optimize the DefenseStorm services to fortify their security measures.