How do I check if an IRS email or website is real?

Paste the URL into a free scanner like Scanify (scanify.to) — it cross-references 95+ antivirus engines, Google Safe Browsing, and WHOIS data in 5 seconds. Real IRS communications only come from .gov addresses and never ask for payment via gift cards, wire transfer, or cryptocurrency.

Tax Season Scams 2026: IRS Phishing, Fake Refund Sites & How to Stay Safe

Q: Does the IRS ever email or text you?

No. The IRS never initiates contact by email, text message, or social media to request personal or financial information. They contact taxpayers by physical mail first. Any email, SMS, or call claiming to be the IRS that asks for personal info, payment, or threatens arrest is a scam.

Q: What is the real IRS website?

The only official IRS website is https://www.irs.gov — note the .gov ending. Anything with .com, .net, .org, .info, or a country-code domain claiming to be the IRS is fake. Examples of fake IRS domains we've seen: irs-refund.com, irs-payments.net, irsgov-verify.com.

Q: I clicked a fake IRS link — what do I do?

If you only clicked but didn't enter information, you're likely fine. Run a virus scan on your device. If you entered personal information or social security number, file an identity theft report at IdentityTheft.gov, freeze your credit with all three bureaus, and report the scam to phishing@irs.gov.

Every January through April, IRS impersonation scams spike to over 2 million Google searches per month. The IRS itself reported a 400% increase in phishing attempts in recent tax seasons — and 2026 is on track to be the worst yet. AI-generated emails now mimic IRS formatting nearly perfectly, and scammers buy domains like irs-refund.com the day before tax season opens.

This guide breaks down every major tax scam circulating right now, shows you the exact warning signs, and gives you a one-step way to verify any suspicious link before you click it.

The single most important rule: The IRS will never email, text, call out of the blue, or DM you on social media. Their first contact is always physical mail. If you receive any digital communication claiming to be the IRS — it is a scam. Full stop.

The 7 Biggest IRS Scams of 2026

Scam #1

"Your tax refund is ready" email

You receive an email with the IRS logo claiming you have a refund waiting and need to "verify your bank details" to release it. The link goes to a fake irs.gov lookalike like irs-refund-portal.com. Real IRS refunds are direct-deposited based on what's already on your tax return — no verification email is ever sent.

Scam #2

SMS "tax overpayment" scam

A text like "IRS: You overpaid by $1,247. Claim refund: tinyurl.com/irs-claim". Tinyurl and bit.ly links hide the real destination. The IRS does not send SMS messages. Ever. Delete and block the number.

Scam #3

"You owe back taxes" threatening call

An automated voice claims you owe thousands and threatens arrest unless you pay immediately — usually via gift cards, wire transfer, or cryptocurrency. The IRS only accepts payment via standard methods (check, direct debit, IRS.gov payment portal) and never demands immediate payment over the phone.

Scam #4

W-2 phishing aimed at HR/payroll

An email pretending to be from the company CEO asks payroll to send all employee W-2 forms. Within minutes, scammers file fraudulent returns using those Social Security numbers. If you work in HR, never email tax documents without verbal confirmation from the requester in person.

Scam #5

Fake tax preparer storefronts

"Tax preparers" who appear in January with promises of huge refunds, file inflated returns, take a cut, and disappear by April. The IRS holds you legally responsible. Always check that a preparer has a PTIN (Preparer Tax Identification Number) registered with the IRS.

Scam #6

"Tax debt relief" robocalls

"Our tax attorneys can settle your IRS debt for pennies on the dollar — call now." These are predatory. The IRS has free Taxpayer Advocate Services (taxpayeradvocate.irs.gov). Anyone charging $5,000+ to "settle" your debt is a scam.

Scam #7

Fake stimulus / "tax credit" landing pages

Years after stimulus payments ended, scammers still run ads for "unclaimed stimulus" or "new tax credit you qualify for". They harvest your SSN, file fraudulent returns in your name, then pocket the refund.

Verify any tax-related link in 5 seconds

Paste the URL. We check it against 95+ antivirus engines, Google Safe Browsing, WHOIS, and SSL — and tell you if it's real IRS or a scam.

Scan a Link Now →

How to Spot a Fake IRS Website

Every legitimate IRS website ends in .gov. Anything else is a scam. Here are the exact patterns scammers use:

Fake TLD: irs.com, irs.net, irs.info, irs-payments.org — none of these are the IRS.
Hyphenated lookalikes: irs-gov.com, irs-refund.com, irs-help.net. The hyphen is the giveaway.
Subdomain tricks: irs.gov.refund-portal.com — only the final part before the slash is the actual domain. Here, the domain is refund-portal.com, not irs.gov.
Typosquats: 1rs.gov (number 1 instead of letter i), iirs.gov, irrs.gov.

What To Do If You Got Scammed

If you entered your SSN, bank info, or tax documents into a fake IRS site:

Report identity theft at IdentityTheft.gov — this is the federal one-stop shop. It walks you through everything.
File IRS Form 14039 (Identity Theft Affidavit) to flag your account so fraudulent returns are blocked.
Freeze your credit with all three bureaus (Equifax, Experian, TransUnion) — free, takes 5 minutes each.
Forward the scam email to phishing@irs.gov and report the website at reportfraud.ftc.gov.
Check your tax transcript at irs.gov/individuals/get-transcript to see if anyone has already filed in your name.

Pro tip: File your taxes as early as possible. Most identity-theft tax returns succeed because the scammer files before you do. Filing in January or February closes that window.

How Scanify Helps During Tax Season

Scanify checks any URL against seven safety sources in a single request:

VirusTotal's 95+ antivirus engines (including Kaspersky, ESET, Microsoft, Bitdefender)
Google Safe Browsing's official phishing blocklist
URLScan.io — opens the link in a sandbox and takes a screenshot so you can see the page without visiting
WHOIS — how old is this domain? A site registered last week impersonating the IRS is a screaming red flag
SSL/TLS certificate validity
Have I Been Pwned — has this domain been associated with breaches?
Our own scoring layer that combines all six into one 0–100 score

One paste, one verdict. Try it free on any link →

Frequently Asked Questions

Does the IRS ever email or text you?

No. Never. The IRS only initiates contact via physical mail. Any email, SMS, social DM, or unexpected phone call claiming to be the IRS is a scam.

What is the real IRS website?

Only https://www.irs.gov — note the .gov ending. Anything ending in .com, .net, .org, .info or with hyphens like "irs-refund" is fake.

I clicked a fake IRS link — what do I do?

If you only clicked but didn't enter info, run a virus scan and you're likely safe. If you entered personal info, file a report at IdentityTheft.gov, freeze your credit, and email phishing@irs.gov.

How do I check if an IRS email is real?

Paste any link from the email into Scanify — we check 95+ antivirus engines, Google Safe Browsing, WHOIS, and SSL in 5 seconds.