惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

酷 壳 – CoolShell
酷 壳 – CoolShell
H
Hacker News: Front Page
P
Palo Alto Networks Blog
T
ThreatConnect
Apple Machine Learning Research
Apple Machine Learning Research
博客园_首页
T
True Tiger Recordings
P
Privacy & Cybersecurity Law Blog
B
Blog
IT之家
IT之家
Last Week in AI
Last Week in AI
F
Full Disclosure
Hacker News: Ask HN
Hacker News: Ask HN
C
Comments on: Blog
Microsoft Azure Blog
Microsoft Azure Blog
C
Cybersecurity and Infrastructure Security Agency CISA
Microsoft Security Blog
Microsoft Security Blog
博客园 - 【当耐特】
N
News and Events Feed by Topic
NISL@THU
NISL@THU
腾讯CDC
雷峰网
雷峰网
Security Latest
Security Latest
李成银的技术随笔
M
Microsoft Research Blog - Microsoft Research
L
LangChain Blog
L
Lohrmann on Cybersecurity
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
C
Check Point Blog
Y
Y Combinator Blog
Recent Announcements
Recent Announcements
博客园 - Franky
N
News | PayPal Newsroom
V
V2EX
A
About on SuperTechFans
The Register - Security
The Register - Security
月光博客
月光博客
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Google Online Security Blog
Google Online Security Blog
MyScale Blog
MyScale Blog
Cisco Talos Blog
Cisco Talos Blog
Vercel News
Vercel News
WordPress大学
WordPress大学
C
Cyber Attacks, Cyber Crime and Cyber Security
The Hacker News
The Hacker News
IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog
IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog
爱范儿
爱范儿
A
Arctic Wolf
L
LINUX DO - 最新话题
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More

WeLiveSecurity

The quest for greater tech independence Why geopolitical turmoil is a gift for scammers, and how to stay safe FrostyNeighbor: Fresh mischief and digital shenanigans Eyes wide open: How to mitigate the security and privacy risks of smart glasses Fake call logs, real payments: How CallPhantom tricks Android users Fixing trivial passwords is as easy as 123456 A rigged game: ScarCruft compromises gaming platform in a supply-chain attack This month in security with Tony Anscombe – April 2026 edition The calm before the ransom: What you see is not all there is GopherWhisper: A burrow full of malware New NGate variant hides in a trojanized NFC payment app Ransomware’s back office: What the ransom note won’t say Why that next data breach alert could be a trap Supply chain dependencies: Have you checked your blind spot? Recovery scammers hit you when you’re down: Here’s how to avoid a ‘second strike’ As breakout time accelerates, prevention-first cybersecurity takes center stage Digital assets after death: Managing risks to your loved one’s digital estate This month in security with Tony Anscombe – March 2026 edition RSAC 2026 wrap-up – Week in security with Tony Anscombe A cunning predator: How Silver Fox preys on Japanese firms this tax season Virtual machines, virtually everywhere – but not all protected Cloud workload security: Mind the gaps Move fast and save things: A quick guide to recovering a hacked account EDR killers explained: Beyond the drivers Face value: What it takes to fool facial recognition Cyber fallout from the Iran war: What to have on your radar Sednit reloaded: Back in the trenches What cybersecurity actually does for your business How SMBs use threat research and MDR to build a defensive edge Protecting education: How MDR can tip the balance in favor of schools This month in security with Tony Anscombe – February 2026 edition Mobile app permissions (still) matter more than you may think Faking it on the phone: How to tell if a voice call is AI or not PromptSpy ushers in the era of Android threats using GenAI Is Poshmark safe? How to buy and sell without getting scammed Is it OK to let your children post selfies online? Naming and shaming: How ransomware groups tighten the screws on victims OfferUp scammers are out in force: Here’s what you should know A slippery slope: Beware of Winter Olympics scams and other cyberthreats This month in security with Tony Anscombe – January 2026 edition DynoWiper update: Technical analysis and attribution Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan Drowning in spam or scam emails lately? Here’s why ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025 Children and chatbots: What parents should know Common Apple Pay scams, and how to stay safe Old habits die hard: 2025’s most common passwords were as predictable as ever Why LinkedIn is a hunting ground for threat actors – and how to protect yourself Is it time for internet services to adopt identity verification? Your information is on the dark web. What happens next? Credential stuffing: What it is and how to protect yourself This month in security with Tony Anscombe – December 2025 edition A brush with online fraud: What are brushing scams and how do I stay safe? Revisiting CVE‑2025‑50165: A critical flaw in Windows Imaging Component LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan ESET Threat Report H2 2025 Black Hat Europe 2025: Was that device designed to be on the internet at all? Black Hat Europe 2025: Reputation is currency – even in the ransomware economy Locks, SOCs and a cat in a box: What Schrödinger can teach us about cybersecurity Seeking symmetry during ATT&CK® season: How to harness today’s diverse analyst and tester landscape to paint a security masterpiece The biggest catch: How whaling attacks target top executives Phishing, privileges and passwords: Why identity is critical to improving cybersecurity posture MuddyWater: Snakes by the riverbank Oversharing is not caring: What’s at stake if your employees post too much online This month in security with Tony Anscombe – November 2025 edition What parents should know to protect their children from doxxing Influencers in the crosshairs: How cybercriminals are targeting content creators MDR is the answer – now, what’s the question? The OSINT playbook: Find your weak spots before attackers do PlushDaemon compromises network devices for adversary-in-the-middle attacks What if your romantic AI chatbot can’t keep a secret? Can password managers get hacked? Here’s what to know Why shadow AI could be your biggest security blind spot In memoriam: David Harley The who, where, and how of APT attacks in Q2 2025–Q3 2025 ESET APT Activity Report Q2 2025–Q3 2025 Sharing is scaring: The WhatsApp screen-sharing scam you didn’t see coming How social engineering really works | Unlocked 403 cybersecurity podcast (S2E6) Ground zero: 5 things to do after discovering a cyberattack This month in security with Tony Anscombe – October 2025 edition Fraud prevention: How to help older family members avoid scams Cybersecurity Awareness Month 2025: When seeing isn't believing Recruitment red flags: Can you spot a spy posing as a job seeker? How MDR can give MSPs the edge in a competitive market Cybersecurity Awareness Month 2025: Cyber risk thrives in the shadows Gotta fly: Lazarus targets the UAV sector SnakeStealer: How it preys on personal data – and how to stay safe Cybersecurity Awareness Month 2025: Building resilience against ransomware Minecraft mods: When ‘hacking’ your game becomes a security risk IT service desks: The security blind spot that may put your business at risk Cybersecurity Awareness Month 2025: Why software patching matters more than ever AI-aided malvertising: How chatbots can help spread scams How Uber seems to know where you are – even with restricted location permissions Cybersecurity Awareness Month 2025: Passwords alone are not enough The case for cybersecurity: Why successful businesses are built on protection Beware of threats lurking in booby-trapped PDF files Manufacturing under fire: Strengthening cyber-defenses amid surging threats New spyware campaigns target privacy-conscious Android users in the UAE Cybersecurity Awareness Month 2025: Knowledge is power This month in security with Tony Anscombe – September 2025 edition
Taxing times: Top IRS scams to look out for in 2026
2026-02-10 · via WeLiveSecurity

Scams

It’s time to file your tax return. And cybercriminals are lurking to make an already stressful period even more edgy.

10 Feb 2026  •  , 5 min. read

Taxing times: Top IRS scams to look out for in 2026

To misquote Benjamin Franklin, nothing is certain in this world except for death, taxes and scammers. Unfortunately, with tax filing season now in full swing, the fraudsters are also out in force, doing their best to cash in. The risk of unwittingly sharing personal and financial information, enabling third parties to hijack your tax refunds, or even being tricked into committing fraud yourself, has grown immeasurably over recent years.

To stay on the right side of the law, and keep the scammers at bay, read on.

How to spot the scams

Tax and IRS scams in general contain many of the same warning signs you should associate with other digital fraud types. Scammers may impersonate the IRS or tax preparers via phone/email/text, using official logos or spoofing caller ID/sender domains. They may even demand money or fines. Or they could trick you into filing fraudulent returns. Whatever the pretext, chances are that the fraudsters could also leverage AI to supercharge their schemes.

Just remember the following warning signs:

  • An unsolicited email/text/call from the IRS. The tax-collection agency will always make contact initially via an official letter through the mail, not a text message.
  • The IRS demands immediate payment to avoid arrest or further penalties. The IRS will always provide taxpayers time to appeal or query outstanding sums.
  • Scammers will ask for payment by unusual means, such as gift card or cryptocurrency, which the IRS doesn’t accept.
  • You are ordered to share personal and/or financial information like credit card numbers and banking logins. The IRS will never call, text or email asking for such details.
  • With the rise of AI-aided scams, your eyes and ears can no longer be trusted as primary authentication mechanisms. Remember that the IRS will never initiate unsolicited contact via email, text, or social media to ask for your personal or financial information.

The most common IRS scams

With the above in mind, look out for the following most common IRS and tax return scams:

Phishing/smishing/vishing

Emails, texts and even phone calls purporting to come from tax authorities (e.g., IRS, state tax agencies and tax software companies). The end goal is to trick you into handing over cash, sensitive personal/financial information, or installing malware on your device. The scammers may use a pretext such as an unexpected tax refund. Or they could go down a different route and claim your account has been suspended and/or you will face serious repercussions unless you atone for ‘unpaid taxes’.

Whatever the lure, they’ll usually ask you to provide more information, send them money, and/or click on a malicious link.

irs-tax-scam-example-one
Source: Reddit

Tax refunds

The IRS tax refund system offers several opportunities for scammers to make easy money. All they need is your personal information (including Social Security details, name and date of birth) to file, and deposit the refund in a bank account under their control. The first you might find out is when your legitimate filing is rejected because a return has already been sent in under your name.

Alternatively, scammers impersonating the IRS might send you an unsolicited email/text claiming you are owed a big rebate or refund. They’ll ask you to visit a phishing website mirroring the IRS one to ‘verify your account’ details.

irs-tax-scam-example-two
Source: Reddit

W-2 form scams

A social media influencer advertises a ‘secret trick’ which you can use to game the tax system and get a large refund. All you have to do is create a fake W-2 form, report inflated earnings and large tax bills, and pay them a fee. By doing this, you are committing fraud and could face major financial penalties from the IRS, or even a criminal investigation. Even worse, as well as paying the scammer, you have also shared your personal and tax details, which they can use in follow-on fraud.

Self-employment tax credit

Also circulating on social media are claims made by scammers about a non-existent “Self-Employment Tax Credit.” According to the IRS, they claim self-employed people and gig workers can get big COVID-19 payments by filling in the right forms. Once again, they do so to get their hands on your cash and personal information.

Dishonest tax preparers

It’s also wise to be on the lookout for unscrupulous “tax professionals” who may substitute their bank account information for your own in order to divert tax refunds. They might prepare a tax return but then charge a fee based on the size of the refund. Be suspicious of any that refuse to sign or include their IRS Preparer Tax Identification Number (PTIN).

What happens next?

If you suspect an IRS scam, the best thing to do is to halt all communications. That means hanging up the phone, and deleting any phishing email and/or text. If you’re talking to someone and aren’t sure if they’re the real deal or not, ask for their name and call back number and check the details online. Scam emails can be sent to phishing@irs.gov before deletion, while you can submit an official fraud report to the IRS here.

Staying safe from IRS scams

To avoid becoming another victim of scams like the ones listed above, stay on the lookout for the warning signs we’ve included for you. Unsolicited contact, promises of large refunds, and threats of fines or arrest should be immediate red flags. Report the attempted scam and hang up or delete. It also pays to be cautious about any “tax tricks” or tips you might see on social media, especially if they involve paying fees to a third party or handing over any of your personal/financial information.

For added security and peace of mind, switch on multifactor authentication (MFA) for any account used to access tax and financial information. This should keep them safe even if threat actors get hold of your logins. An IRS Identity Protection PIN (IP PIN) may also be a good idea, to ensure no third party can file a return using your Social Security number (SSN) or individual taxpayer identification number (ITIN).

Finally, consider filing your returns early – as soon as you receive your W-2 form. That way, scammers won’t be able to beat you to a possible refund. None of these are guaranteed to stop the scammers. But combined, they will send a clear message.


Let us keep you
up to date

Sign up for our newsletters