Mid-summer is when a lot of us finally tackle the “paper pile”—mail, medical bills, school forms, and yes, tax-related paperwork. Unfortunately, scammers know that, and “IRS scam message” attempts can show up year-round by text, email, phone call, or a letter that looks official at first glance.
This is a calm, verification-first guide for what to do if something claiming to be from the IRS lands in your inbox or mailbox. It’s not tax advice, and it won’t tell you what you “should” file or pay. Instead, it focuses on practical steps: how to confirm a message is real, how to use IRS.gov safely, and how to report suspicious contact without getting pulled into a pressure situation.
Start with the basics: find the real IRS site and phone numbers (safely)
When you’re stressed, it’s easy to click the first link you see—or call a number a stranger gives you. A safer default is to start fresh, on your terms.
- Type “IRS.gov” directly into your browser instead of clicking a link in a text/email. This helps you avoid lookalike sites designed to capture passwords or personal information.
- Be cautious with search results and ads. Even when a search result looks convincing, it may not be the official site. When in doubt, use IRS.gov (or USA.gov for official contact directions) as your starting point.
- Don’t trust caller ID. Phone numbers can be spoofed, meaning the screen may display “IRS” even if it’s not.
If you need a phone number or mailing address, look it up from IRS.gov or USA.gov—not from a voicemail, text, or email you didn’t request.
How to handle a notice: what to save, what not to share, and how to verify
If you received a letter or notice, treat it like you would a credit-card statement: don’t ignore it, but don’t panic—and don’t rush into sharing details.
- Save the whole package. Keep the letter and envelope. The envelope can contain markings that help confirm where it came from.
- Look for identifying information. Many IRS letters include a notice or letter number. Write it down, along with the date and any amount referenced.
- Don’t “confirm” sensitive details just because someone asks. A legitimate agency generally won’t need you to read back full account numbers, passwords, or one-time security codes.
To verify the notice itself, go to IRS.gov and look for the IRS guidance that explains notices/letters and what different notice types mean. If you already use an IRS online account, you can also compare what you received with what your account shows—without relying on the letter’s phone number or links.
Red flags: threats, urgent payment demands, and unusual payment methods
Most scams have the same emotional goal: get you flustered so you act quickly. If the message pushes urgency, secrecy, or fear, slow down and verify.
Common red flags to take seriously (and double-check via IRS.gov and the FTC):
- Threats or intimidation (for example, immediate arrest, deportation, or “sending the police” if you don’t pay right now).
- Pressure to stay on the line or not talk to a spouse, accountant, or trusted friend.
- Unusual payment methods such as gift cards, cryptocurrency, or wiring money to a personal account.
- Links that don’t clearly go to IRS.gov (misspellings, extra words, or a “.com” lookalike domain).
- Requests for one-time passcodes or sign-in verification codes. Those are meant to protect you; sharing them can help someone access your accounts.
If you truly owe money, the safest approach is verification first: navigate to IRS.gov yourself and use official payment options there. If you want personal guidance on your situation, consider a qualified tax professional—especially before responding to anyone who contacted you unexpectedly.
Use official IRS tools carefully + a printable “Do’s and Don’ts” checklist
Online tools can be convenient, but only when you’re sure you’re on the real site and you keep your sign-in details private. In general, protect your login, use strong passwords, and avoid sharing verification codes with anyone—no matter how “official” they sound.
Do’s and Don’ts when an IRS message arrives (save or print):
- DO type IRS.gov directly into your browser.
- DO keep the letter and envelope, and note the notice/letter number if present.
- DO compare instructions with official IRS guidance on notices and payments.
- DO take a beat and ask for help if you feel pressured.
- DON’T click links or open attachments from unexpected “IRS” emails or texts.
- DON’T share passwords, PINs, or one-time security codes.
- DON’T pay with gift cards, crypto, or wire transfers just because someone demands it.
- DON’T rely on caller ID or a number provided by the person contacting you—look up official contact info yourself.
If you think the contact is a scam, report it. The IRS and the FTC both maintain reporting pathways, and reporting helps build cases and warn other consumers.
Sources
Recommended sources to consult (and references for verification). Note: Reporting instructions and any email forwarding address for suspicious “IRS” emails should be confirmed on IRS.gov before you use it, because specific addresses and steps can change.
- Internal Revenue Service (IRS) — irs.gov
- Federal Trade Commission (FTC) — ftc.gov
- USA.gov — usa.gov
- Cybersecurity & Infrastructure Security Agency (CISA) — cisa.gov
