Fake IRS Tax-Refund Phishing Scam
Scammers send emails and texts impersonating the IRS, claiming the recipient is owed a tax refund and must verify personal and banking details to receive it. The real IRS initiates all contact by mail, never by email or text, and issues refunds through the process you set up when you filed — not via unsolicited messages.
Part of: Fake Tax Refund Scams
Last reviewed: 7 June 2026
The Internal Revenue Service is one of the most impersonated government agencies in the United States. Every filing season, criminals send waves of phishing emails and texts claiming that the recipient is owed a federal tax refund, and that personal verification or banking details are needed to release it.
The deception preys on two emotions simultaneously: greed (free money is coming) and fear (government authority demanding compliance). Many victims hand over Social Security numbers, bank account details, and identity documents before realising they have been tricked.
A clear understanding of how the IRS actually operates cuts through this immediately. The IRS does not initiate contact with taxpayers by email, text, or social media. Its first contact is always a letter delivered through the United States Postal Service.
How this scam works on the IRS brand
A typical phishing email carries an IRS logo and reads: 'You have a pending refund of $XXX. To claim it, verify your identity at the link below within 48 hours.' The link leads to a convincing replica of the IRS website (irs.gov) asking for SSN, date of birth, bank routing numbers, and sometimes a photo of a government ID.
Texting variants are briefer but equally dangerous: 'IRS: Tax refund of $XXX pending. Confirm your details here: [link].' Real IRS electronic refund information is available only through the legitimate 'Where's My Refund?' tool at irs.gov or the IRS2Go mobile app — accessed directly, never via a link sent to you.
Some campaigns combine phishing with voice calls: an automated message claims the IRS has sent a refund cheque that was returned, and asks you to call back on a spoofed number staffed by scam agents.
Common red flags
- Any IRS contact by email or text is not how the IRS initiates communication — first contact is always by postal mail
- Message claims a refund is waiting and requires you to click a link to claim it
- Requests your Social Security number, bank routing/account numbers, or ID documents via a link
- Urgency framing: 'refund expires in 48 hours' or 'failure to respond may affect your return'
- The email address contains 'irs' but is not from an @irs.gov domain
- Link goes to a domain other than irs.gov (e.g., irs-refunds[.]com)
- Message arrives in tax off-season when refunds are less expected
How to protect yourself
- Remember the rule: the IRS initiates contact by postal mail — not email, text, or phone
- Check refund status exclusively via the 'Where's My Refund?' tool at irs.gov or the IRS2Go app
- Never click links in unsolicited emails or texts claiming to be from the IRS
- Do not provide your SSN, banking details, or ID documents in response to any digital message claiming to be the IRS
- If you believe you are owed a refund, log in to your IRS Online Account at irs.gov
- Enable identity protection by applying for an IRS Identity Protection PIN at irs.gov/identity-theft-central
How to report it
- Forward the phishing email to [email protected]
- Report IRS impersonation to the Treasury Inspector General for Tax Administration (TIGTA) at tigta.gov or 1-800-366-4484
- File a complaint with the FTC at reportfraud.ftc.gov
- If identity theft occurred, report it at identitytheft.gov
- Forward smishing texts to 7726 and then to [email protected]
Frequently asked questions
Will the IRS ever email or text me about a refund?
No. The IRS does not initiate contact by email, text, or social media. Its first communication is always a letter sent by postal mail. Any email or text claiming to be from the IRS about a refund is fraudulent.
How do I check if I actually have a refund waiting?
Visit irs.gov directly and use the official 'Where's My Refund?' tool or log in to your IRS Online Account. These are the only legitimate ways to check your refund status.
What if the email looks exactly like official IRS correspondence?
Phishing emails can be visually convincing. The decisive test is not appearance but channel: the IRS never uses email to initiate contact. Regardless of how authentic an email looks, do not click its links.
What is an IRS Identity Protection PIN and should I get one?
An IP PIN is a six-digit number that prevents someone else from filing a tax return using your SSN. You can get one at irs.gov/identity-theft-central. It is a free and effective safeguard against tax identity theft.