Tax Scams: AI Impersonators, Ghost Preparers, and ID Theft

Tax scams are schemes designed to steal money or personal information by impersonating the IRS, promising fake refunds, or filing fraudulent returns in your name, and the 2026 versions rely heavily on AI-generated voices, spoofed caller IDs, and viral social media “hacks.” The single most useful thing to know is how the real IRS operates, because almost every scam breaks one of its rules within the first few seconds of contact.

How the Real IRS Contacts You

The IRS starts almost every case with a physical letter delivered by the U.S. Postal Service.1Internal Revenue Service. When an IRS Letter Arrives, Taxpayers Don’t Need to Panic, but They Do Need to Read It It does not open contact through social media or text message. It cannot revoke your driver’s license, cancel a business license, or change your immigration status, and any threat involving those is fabricated.2Internal Revenue Service. People First Initiative FAQs: Liens, Levies and Other Collection Activities

One real enforcement power gets misused by scammers: the IRS can certify seriously delinquent tax debt to the State Department, which may deny or revoke a passport. That process runs through written notices with time to respond.3Internal Revenue Service. Revocation or Denial of Passport in Cases of Certain Unpaid Taxes A surprise phone call demanding instant payment is not part of it.

Red Flags Common to Every Tax Scam

The clearest tell is the demand for immediate payment through untraceable methods. Gift cards, prepaid debit cards, wire transfers, and cryptocurrency are the scammer’s preferred rails because the money is nearly impossible to recover. The IRS accepts payments to the U.S. Treasury through direct pay, debit or credit cards via approved processors, and checks. It will never ask you to load money onto a retail gift card and read the numbers over the phone.

Other warning signs:

  • Threats of arrest, deportation, or police at your door. Real tax disputes go through written notices and administrative appeals.
  • Requests for a Social Security number, bank account, or PIN by email or text. The IRS doesn’t ask for those through those channels.
  • Unsolicited refund promises, especially amounts that seem large relative to your income. These are lures for your banking information.
  • Pressure to act in the next few minutes. The real IRS gives you time to review, respond, and appeal.

AI-Powered Impersonation Scams

The 2026 IRS Dirty Dozen list flags a sharp rise in AI-generated robocalls, voice-cloned “agents,” and polished impersonation emails.4Internal Revenue Service. Dirty Dozen Calls now display spoofed IDs that look like legitimate IRS numbers, and some follow-ups include QR codes that route to credential-harvesting sites.

The technology has also killed the old advice about spotting scams by their bad grammar and clumsy logos. Fake emails and messages now look nearly identical to official correspondence. The better rule: if you haven’t first received a letter in the mail, treat any phone call, email, or text about your taxes as suspicious until you’ve independently confirmed it by logging into your IRS online account or calling the IRS directly.

Social Media “Refund Hacks” and Bogus Credits

Viral posts on TikTok, Instagram, and similar platforms promote supposed tax “loopholes” that the IRS has identified as outright fraud. Typical instructions tell people to fabricate W-2s, invent self-employment income, exaggerate deductions, or use fake employer identification numbers to pump up a refund. The person promoting the “hack” collects a fee or referral bonus and disappears. You’re the one who signed the return.

The Employee Retention Credit has been a heavy target for scam promoters. Ads across TV, radio, social media, and mass emails push businesses to claim the credit even when they clearly don’t qualify, and some pitches are dressed up to look like government letters.5Internal Revenue Service. Employee Retention Credit The only legitimate path to the ERC is a federal employment tax return, and anyone who claims it incorrectly has to pay it back with penalties and interest.

Ghost Preparers

A ghost preparer charges you to prepare a return but won’t sign it or include a Preparer Tax Identification Number. Every paid federal preparer is required to have a valid PTIN and put it on every return they prepare.6Internal Revenue Service. PTIN Requirements for Tax Return Preparers By leaving the preparer section blank, they stay invisible while you carry the full legal weight of whatever they wrote.

Ghost preparers attract clients by promising oversized refunds, then get there by inventing deductions, fabricating income, or claiming credits the client doesn’t qualify for. The Earned Income Tax Credit is a common target because it can generate large refunds for lower-income filers who meet strict eligibility rules.7Internal Revenue Service. Who Qualifies for the Earned Income Tax Credit (EITC) Many of these preparers charge a percentage of the refund, which builds in an incentive to inflate the numbers.

How to Verify a Preparer Before You Hand Over Your Documents

Check the IRS Directory of Federal Tax Return Preparers with Credentials and Select Qualifications. It lists attorneys, CPAs, enrolled agents, enrolled actuaries, enrolled retirement plan agents, and participants in the IRS Annual Filing Season Program.8Internal Revenue Service. Directory of Federal Tax Return Preparers with Credentials and Select Qualifications

A legitimate preparer will ask you to sign your own return, include their PTIN in the paid preparer section, and give you a copy of the completed return. Walk away if a preparer tells you to sign a blank return, directs your refund into their bank account, or quotes a fee as a percentage of the refund.

Tax-Related Identity Theft

Identity theft often stays hidden until you try to file. The classic sign: your e-filed return is rejected because someone has already filed under your Social Security number. Other signals include an IRS letter about a return you didn’t file, a notice about wages from an employer you never worked for, or tax transcripts you never asked for.

If any of that happens, file Form 14039, the Identity Theft Affidavit, online or by mail.9Internal Revenue Service. When to File an Identity Theft Affidavit Expect a long wait. As of early 2026, the IRS is averaging roughly 623 days to resolve identity theft victim assistance cases.10Internal Revenue Service. How IRS ID Theft Victim Assistance Works The Taxpayer Advocate Service has pushed the IRS to reduce that to 90 days by the end of 2026, but the backlog remains severe.

Get an Identity Protection PIN

An IP PIN is a six-digit number the IRS assigns you that must appear on your return before the IRS will process it. Without the correct number, a fraudulent return filed under your Social Security number gets rejected. Anyone with an SSN or ITIN who can verify their identity can opt in.11Internal Revenue Service. Get an Identity Protection PIN

There are three ways to get one:

  • Online through your IRS account. You must be 18 or older and able to verify your identity through ID.me with a government photo ID and an SSN or ITIN.
  • By phone using Form 15227, if your adjusted gross income is below $84,000 ($168,000 for married filing jointly). The IRS calls to verify, and the PIN arrives by mail in four to six weeks.
  • In person at a Taxpayer Assistance Center with a government photo ID and one additional ID. The PIN is mailed after verification.

Parents and legal guardians can request IP PINs for their dependents, including children under 18. A new PIN is generated each year, so you need the current one before filing.

Real IRS Private Debt Collectors vs. Impersonators

The IRS does assign some overdue accounts to private collection agencies, which gives scammers an obvious cover story. Only three agencies are currently authorized: CBE Group Inc., Coast Professional Inc., and ConServe.12Internal Revenue Service. Private Debt Collection

Before any of them contacts you, the IRS mails Notice CP40, which names the assigned agency and gives you a Taxpayer Authentication Number.13Internal Revenue Service. Understanding Your CP40 Notice The agency then sends its own introductory letter. Both letters carry the same authentication number, and both you and the caller use it to confirm each other’s identity. If someone calls claiming to be a private tax collector and you never received CP40, it’s a scam. Legitimate private collectors will never demand a gift card, prepaid card, or cryptocurrency, and they will never threaten arrest.

How to Report a Tax Scam

Where you report depends on what happened:

If You’ve Already Been Scammed

Move fast. Contact your bank or the payment provider the moment you realize what happened. Credit card charges and some wire transfers can sometimes be reversed if you report them quickly. Gift card payments are almost always unrecoverable, but still report the fraud to the card issuer.

If you handed over a Social Security number or other personal information, file Form 14039 with the IRS to flag your account.9Internal Revenue Service. When to File an Identity Theft Affidavit Place a fraud alert or credit freeze with Equifax, Experian, and TransUnion to block new accounts opened in your name. Request an Identity Protection PIN from the IRS to block fraudulent tax filings going forward.11Internal Revenue Service. Get an Identity Protection PIN

Report the scam through the channels above, even if you feel embarrassed about being caught. The IRS and FTC use these reports to shut down active operations and warn other taxpayers, and a fast report gives you the best chance of recovering funds or limiting the damage to your tax account.