Will the IRS Email You? Rare Cases, Scam Signs, and IP PIN

No, the IRS does not email you out of the blue. The agency does not send unsolicited emails, text messages, or social media messages about tax debts, refunds, or account problems.¹ If a message lands in your inbox claiming to be the IRS and you did not ask for it, treat it as a scam. Real IRS contact almost always starts with a paper letter delivered by the U.S. Postal Service.

How the IRS Actually Reaches You

Nearly every IRS communication begins with a mailed notice sent to the last address on your tax return.² Common examples include the CP2000, which flags a mismatch between your return and income reported to the IRS, and Letter 12C, which asks you to clarify something on a return you already filed.

If you owe money, the IRS does not skip straight to enforcement. It sends a series of mailed notices first: a CP14 balance-due notice within 60 days of assessment, follow-up reminders in the CP501 and CP503, and a CP504 warning of intent to levy if you do not pay or make arrangements within 30 days.³ A final Letter 1058 or LT11 follows before any levy or lien, and that notice triggers your right to a Collection Due Process hearing. You will always get multiple paper warnings before anything happens to your wages, bank account, or property.

To verify what you actually owe, log in to your IRS Online Account at irs.gov. It shows your balance, payment history, and more than 200 types of IRS notices.⁴ If you want to speak to someone, call the IRS directly at 800-829-1040.⁵

Phone calls and in-person visits do happen, but they almost always follow written notices you have already received, and any agent at your door will show two forms of IRS identification on request.⁶

The Narrow Cases Where a Real IRS Email or Text Can Happen

There are a few situations where a legitimate digital message from the IRS is possible, but each one requires you to have taken the first step.

The IRS sends texts only with your permission, such as the two-factor authentication codes you receive after setting up your Online Account.⁶ If you verify your identity through ID.me to use IRS online tools, you may see login-related notifications. Tax professionals enrolled in electronic filing programs receive status updates through their professional portals.

The IRS has also expanded its Document Upload Tool so you can send documents digitally in response to certain notices. That request still arrives on paper: the mailed notice includes a URL and a time-limited access code, and you have 30 days from the date on the notice to upload your response.⁷

In every one of these cases, the digital step exists because you registered for a service or because a paper notice sent you there. A real IRS email or text never asks for your Social Security number, bank details, or passwords through a link. It sends you back to a secure portal you already use.

How to Spot an IRS Email or Text Scam

Fake IRS emails (phishing) and text messages (smishing) run year-round and spike during tax season. The IRS lists them on its annual “Dirty Dozen” of top tax scams.⁸ The patterns repeat:

Fake refund emails telling you to click a link to claim money you are supposedly owed.
Threatening emails warning of arrest, criminal charges, or legal action for unpaid taxes.
Text messages using alarming phrases like “Your account has been put on hold” or “Unusual Activity Report,” with a link to a fake resolution page.
Emails to tax professionals posing as new clients, designed to trick preparers into opening malicious attachments.

Two rules cut through nearly all of them. The IRS will never demand immediate payment by gift card, prepaid debit card, or wire transfer.¹ And real IRS agents do not threaten arrest, deportation, or license revocation over the phone or leave pre-recorded voicemails demanding a callback with payment. Anything using those tactics is fraudulent.

What to Do With a Suspicious Message

If a suspicious email lands in your inbox, do not reply, click any links, or open any attachments. Forward the message to phishing@irs.gov.⁹ Use your email program’s “Forward as attachment” option if it has one. A standard forward strips the header data the IRS needs to trace the sender. After forwarding, delete the message from your inbox and trash folder.

If you want to know whether the underlying claim is real (an actual balance, a real notice), don’t use anything in the suspicious message. Go directly to irs.gov and log in to your Online Account, where every genuine notice and balance shows up.⁴

If You Already Clicked a Link or Shared Information

Move quickly. Stop responding to the sender, close the message, and do not send any money or additional details. Then work through recovery:

Run antivirus software on any device where you clicked a link or opened an attachment.
Change your IRS Online Account password to something complex and unique.¹⁰
Alert your bank and any card issuers so they can watch for unauthorized transactions.¹¹
Place a fraud alert with any one of the three major credit bureaus: Equifax (800-525-6285), Experian (888-397-3742), or TransUnion (800-680-7289). The bureau you contact must notify the other two.
Go to IdentityTheft.gov for a step-by-step recovery plan.¹⁰
If you think someone may use your information to file a fraudulent return, submit Form 14039, Identity Theft Affidavit, online at irs.gov, by fax to 855-807-5720, or by mail to the IRS in Fresno, CA.

Keep filing your returns and paying any taxes owed on time while your case is worked. Missing deadlines during the process adds penalties and interest on top of the identity theft problem.

Prevent the Next Attack With an Identity Protection PIN

An Identity Protection PIN (IP PIN) is a six-digit number the IRS issues to you that stops anyone else from filing a return using your Social Security number or Individual Taxpayer Identification Number. You do not have to be a confirmed identity theft victim. Anyone who can verify their identity is eligible, and parents or legal guardians can request an IP PIN for a dependent.¹²

The fastest route is your IRS Online Account, under the IP PIN section of your profile. If you cannot verify online, you have two backups:

Form 15227, available if your adjusted gross income on your last filed return was below $84,000 (individual) or $168,000 (married filing jointly). The IRS calls to verify your identity after you submit, then mails your PIN in four to six weeks.
An in-person visit to a Taxpayer Assistance Center with a government-issued photo ID and one additional form of identification. Your PIN arrives by mail in about three weeks.

An IP PIN is good for one calendar year, and you receive a new one every year. If you enrolled online, you retrieve each January’s PIN from your Online Account rather than the mail, and it is generally available in your account from mid-January through mid-November.¹²

1
Internal Revenue Service. Security Summit Warns of New IRS Impersonation Email Scam; Reminds Taxpayers the IRS Does Not Send Unsolicited Emails
2
Internal Revenue Service. 1.22.2 United States Postal Service (USPS) Classes of Mail, USPS Additional Services and Small Package Carrier (SPC) Services
3
Internal Revenue Service. Understanding Your CP504B Notice
4
Internal Revenue Service. Tax Documents Added to IRS Individual Online Account Tool, Enhancing Services and Convenience for Taxpayers
5
Internal Revenue Service. IRS Reminder: Tax Scams Continue Year-Round
6
Internal Revenue Service. How to Know It’s the IRS
7
Internal Revenue Service. IRS Expands Secure Digital Correspondence for Taxpayers
8
Internal Revenue Service. Dirty Dozen Tax Scams for 2025: IRS Warns Taxpayers to Watch Out for Dangerous Threats
9
Internal Revenue Service. Report Fake IRS, Treasury or Tax-Related Emails and Messages
10
Internal Revenue Service. Identity Theft Guide for Individuals
11
Office of the Comptroller of the Currency. Phishing Attack Prevention: How to Identify and Avoid Phishing Scams
12
Internal Revenue Service. Get an Identity Protection PIN