Yes, IRS scams by mail are common, and they are engineered to look like the real thing. The complication is that the IRS genuinely does contact taxpayers by mail first, so a letter with an IRS logo isn’t automatically fake.1Internal Revenue Service. How to Know It’s the IRS What separates a real notice from a scam is what the letter asks you to do: a genuine notice explains a specific tax year and amount and gives you time to respond, while a fake one pressures you to pay immediately through channels the IRS never uses.
Red Flags That a Letter Is Fake
Threats and Immediate Deadlines
Real IRS notices are bureaucratic. They cite a tax year, state a proposed change or balance, and describe your right to dispute it. A letter that threatens arrest, deportation, or license revocation if you don’t pay today is not from the IRS. The agency has stated plainly that it will never demand immediate payment without giving you a chance to question the amount, and it will never threaten to bring in police or immigration authorities.2Internal Revenue Service. Ways to Tell if the IRS Is Reaching Out or if It’s a Scammer
Gift Cards, Wire Transfers, and Odd Payees
Scammers want money they can’t be forced to return. If a letter tells you to buy gift cards, load a prepaid debit card, or wire funds, that is definitive proof of fraud. The IRS and its authorized private collectors will never ask for payment in any of those forms.2Internal Revenue Service. Ways to Tell if the IRS Is Reaching Out or if It’s a Scammer Legitimate tax payments go to the United States Treasury by check, electronic payment, card through an approved processor, or cash through an authorized retail partner.3Internal Revenue Service. Pay Your Taxes With Cash One giveaway on paper: a fake notice may tell you to make a check payable to “I.R.S.” and mail it to an unfamiliar P.O. box. A real notice directs the check to “United States Treasury.”4Internal Revenue Service. IRS and Security Summit Partners Warn of Fake Tax Bills
QR Codes That Send You to a Website
A newer twist embeds a QR code in the letter, telling you to scan it to “verify your identity” or “claim your refund.” The code leads to a convincing-looking site that harvests your login, Social Security number, or bank details. This is sometimes called quishing, and it works because people trust a piece of mail more than an email link.5United States Postal Inspection Service. Quishing Don’t scan the code. If you want to check on a refund or notice, type irs.gov into your browser directly.
Sloppy Formatting and Wrong Return Addresses
Look at the envelope and letterhead. Blurry logos, misspellings, and inconsistent fonts point to forgery. A genuine IRS envelope shows a return address from a recognized processing center such as Austin, TX; Fresno, CA; or Ogden, UT, and carries the preprinted phrases “Official Business” and “Penalty for Private Use, $300.”6Internal Revenue Service. 1.22.3 Addressing and Packaging A return address that doesn’t match any IRS facility is a strong sign of a fake.
What a Real IRS Notice Looks Like
Genuine notices arrive by U.S. Postal Service mail and share a consistent format. The Department of the Treasury seal appears on the letterhead. Your Social Security number or taxpayer ID is truncated to the last four digits.7Internal Revenue Service. Truncated Taxpayer Identification Numbers A letter printing your full SSN is suspicious on its face.
Every real notice carries a notice or letter number in the upper right corner, such as CP2000 or LTR 11.8Internal Revenue Service. Understanding Your IRS Notice or Letter The body explains the specific issue, the tax year, and the exact dollar amount, and it describes your rights, including the right to dispute the finding and to appeal. A phone number and response deadline appear on the letter, but those are details to verify independently rather than trust at face value.
Fake CP2000 notices are worth flagging specifically because the real CP2000 is one of the most common IRS letters. It goes out when income reported to the IRS doesn’t match what you filed. Counterfeit versions copy the layout closely. The payment instruction is often what gives them away: check made payable to “I.R.S.” and mailed to a strange address rather than to the United States Treasury.4Internal Revenue Service. IRS and Security Summit Partners Warn of Fake Tax Bills Fake refund letters are another recurring format, typically asking you to “verify” your Social Security number or bank account to receive money. The IRS does not need those details by mail to issue a refund; they came in on your return.
How to Verify a Suspicious Letter
Don’t rely on anything printed on the letter itself. Verification uses independent channels.
Start with the notice or letter number in the upper right corner. Search that number on the IRS “Understanding Your IRS Notice or Letter” page at irs.gov.8Internal Revenue Service. Understanding Your IRS Notice or Letter The tool describes what each notice means and what the IRS actually expects. A number that doesn’t match anything in the database is a strong indicator of fraud.
Then log in to your IRS online account. It shows any balance owed by tax year and provides digital copies of notices the IRS has actually sent you.9Internal Revenue Service. Online Account for Individuals If your letter demands $3,000 for a year your account shows as clear, the letter is a scam. This is the most reliable check available.
If you want to speak to a person, do not call the number on the letter. Look up the IRS main line separately (800-829-1040 for individual questions) or use the number shown in your online account. A verified representative can confirm whether the balance actually exists.
Don’t Just Throw It Away
Scam awareness can flip into a different problem: tossing a real notice because it looks like a scam. That mistake gets expensive. The IRS charges a failure-to-pay penalty of 0.5% of unpaid taxes per month, up to 25%.10Internal Revenue Service. Failure to Pay Penalty Interest compounds daily at 7% per year for the first quarter of 2026.11Internal Revenue Service. Interest Rates Remain the Same for the First Quarter of 2026
The most consequential letter to ignore is a Statutory Notice of Deficiency. It gives you 90 days (150 if you live outside the United States) to petition the U.S. Tax Court. If that window closes without a petition, the IRS assesses the tax and moves to collection, and the only way to challenge the amount in court afterward is to pay the full balance and then sue for a refund.12Taxpayer Advocate Service. Statutory Notices of Deficiency Collection can include wage garnishment and property liens.
One boundary worth naming, because scam letters exploit it: passport revocation is real, but only for seriously delinquent tax debt over $66,000 (adjusted annually), which the IRS certifies to the State Department.13Internal Revenue Service. Revocation or Denial of Passport in Cases of Certain Unpaid Taxes A letter threatening license or passport action over a modest bill you’ve never heard of is not how that process works.
Verify every letter. Don’t discard any. The verification steps above take about fifteen minutes.
Reporting a Confirmed Scam Letter
Once you’re sure a letter is fake, report it in more than one place so investigators can connect it to broader activity.
- Treasury Inspector General for Tax Administration (TIGTA). File a complaint at tigta.gov or call 1-800-366-4484. TIGTA handles impersonation of IRS employees.14U.S. Treasury Inspector General for Tax Administration OIG. Submit a Complaint
- The IRS phishing inbox. Scan or photograph the letter and email it to phishing@irs.gov, with “IRS” in the subject line for an IRS impersonation.15Internal Revenue Service. Report Fake IRS, Treasury or Tax-Related Emails and Messages
- U.S. Postal Inspection Service. Because the fraud traveled by mail, you can also report it at uspis.gov/report or by calling 1-877-876-2455.16United States Postal Inspection Service. Report a Crime
Keep the original letter and envelope. Investigators may need the postmark, return address, and barcodes to trace the mailing. You probably won’t hear back individually; the reports feed larger cases.
If You Already Paid or Gave Up Information
Move fast. Recovery odds drop with every hour.
Paid by wire transfer: call your bank or the transfer company (Western Union, MoneyGram, Ria) and ask them to reverse it as fraudulent. Reversal isn’t guaranteed, and acting within the first day matters most.17Consumer Advice – FTC. What to Know Before You Wire Money
Paid with gift cards: contact the card issuer immediately. Some will freeze the balance and refund you if the scammer hasn’t drained the card yet. Hold on to the physical card and the store receipt; both are needed for the claim.18Consumer Advice. Avoiding and Reporting Gift Card Scams Then report the loss at ReportFraud.ftc.gov.
Shared your Social Security number or other personal information: the risk shifts to identity theft, and you have three protections to line up.
File Form 14039, the Identity Theft Affidavit, to put the IRS on notice that your identity may be compromised. The fastest route is the electronic portal at irs.gov/dmaf/form/f14039.19Internal Revenue Service. Form 14039 If you’re responding to an IRS notice about suspected identity theft, send the form to the address or fax listed on that notice instead.20Internal Revenue Service. Identity Theft Affidavit
Get an Identity Protection PIN. This is a six-digit number the IRS assigns to you that must appear on your return before the IRS will process it. Enroll through your IRS online account.21Internal Revenue Service. Get an Identity Protection PIN A scammer holding your SSN but not your IP PIN cannot e-file in your name.
Freeze your credit reports. You have to place the freeze separately with each of the three bureaus: Equifax, Experian, and TransUnion.22Annual Credit Report.com. Security Freeze Basics It’s free, and you can lift it temporarily when you need to apply for credit.
If someone has already used your information, go to IdentityTheft.gov. The site generates a personalized recovery plan, pre-filled dispute letters, and an FTC report you can hand to creditors as proof.23Federal Trade Commission: IdentityTheft.gov. Identity Theft Recovery Steps