IRS text scams are after your refund and data

IRS scam text messages continue to trick consumers year after year, turning a simple notification into a financial nightmare. The FTC reported $470 million in losses to text scams in 2024 alone. And in 2025, tax scams specifically accounted for over $5.7 million in reported financial losses. Texts impersonating the IRS sit at the intersection of both, making them a persistent, high-risk threat to your data and wallet.

This post walks you through what IRS scam text messages look like, why they're so easy to fall for, and how to protect yourself before scammers get the chance.

How IRS text scams work

IRS text scams are smishing attempts that usually involve an official-sounding, urgent text that nudges you to do something. Sometimes that's an unclaimed refund sitting in your account, other times an error in your file that needs to be resolved immediately. In all cases, there's a phishing link to trick you into revealing sensitive data.

That link goes to a website built to look exactly like the real IRS site — same logo, same layout, same tone. If the hook was a refund or tax credit, the site asks you to verify your identity with your Social Security number, bank details, or billing information. If it's about a debt, you're pushed to pay immediately.

The fake site looks convincing enough that most people don't question it until they’ve already fallen for that IRS tax scam.

How to tell if an IRS text is a fake

Knowing what to look for makes these scams a lot easier to catch. From suspicious links that lead you to tax refund scams to threats of legal action, here are five red flags that can help you identify scammers:

• Texts or emails from the IRS: The IRS won’t text or email you. They initiate contact through the US Postal Service, so any text or email claiming to be from them is automatically suspicious.
• Threats of legal action: Scammers use fear to rush you into acting. The real IRS doesn't threaten arrest, deportation, or legal action over text.
• Immediate payment demands: The IRS will never ask you to pay instantly by wire transfer or a third-party app. Those are scammer payment methods, not government ones.
• Suspicious links: Legitimate IRS communications point to irs.gov. If the URL looks slightly different, has extra words, or uses a shortlink, don't click it.
• Typos and odd phrasing: Official government communications are proofread. Grammatical errors and unusual wording are a sign that something isn't right.

How to report IRS text scams

If you receive a suspicious text claiming to be from the IRS, don't reply, click any links, or open attachments. Instead, head over to irs.gov/help/report-fraud and follow the steps to report a fake IRS message.

The agency asks users to forward the text to phishing@irs.gov with the subject line "Text” and the following details:

• Sender's phone number
• The contents of the message
• Your phone number
• The date and time you received it

Delete the text only after you do this. You can also forward the message to 7726 (SPAM), which helps your wireless provider identify and block similar messages. Another option is to directly file a complaint with the FTC. They’ll share it with law enforcement.

What to do if you’ve been targeted

If you’ve clicked a link or entered your details into a suspicious tax site, act quickly. The goal is to cut off the ways scammers can use the information they've got. This involves locking your credit, setting up fraud alerts, and securing your accounts.

• Change your passwords: Assume any login credentials entered on the fake site are compromised. Start with your email and financial accounts, then work through anything else that uses the same password.
• Turn on two-factor authentication: Even if someone has your password, two-factor authentication (2FA) means they still can't get in without a second form of verification. So enable it immediately.
• Set up fraud alerts: Contact one of the three major credit bureaus (Equifax, Experian, or TransUnion) to place a fraud alert on your credit file. This makes it harder for someone to open accounts in your name.
• Request an IRS Identity Protection PIN: An IP PIN is a 6-digit number that prevents others from filing a tax return using your Social Security number. You can request one at irs.gov/identity-theft-fraud-scams.

Don’t let scammers audit your bank account

Spotting an IRS scam text message is one thing, but if your information does get compromised, you need something working in the background to catch it. IRS text scams are built to get your personal data, and scammers can move fast once they have it.

Identity protection services like LifeLock can monitor your bank, credit, and savings accounts and alert you to suspicious activity. And if things do go wrong, LifeLock's restoration guarantee covers legal and expert services up to $1 million, with reimbursement for stolen funds and out-of-pocket expenses.

FAQ

Does the IRS send texts?

No, the IRS won’t call you or text you. They initiate contact via postal mail. If you receive a text message from the IRS, it’s a scam. Don't engage with it.

Can I claim a refund through a text link?

No, the IRS will never send a link to claim a refund. If you're owed a refund, check your status directly at irs.gov. Any link in a text claiming otherwise is an IRS phishing text.

Should I reply "STOP" to the message?

No, replying in any way (even to opt out) confirms to the scammer that your number is active. Don't perform any action on the text. The right move is to report it and delete it without responding.

How do I check my tax status safely?

Always go directly to irs.gov by typing it into your browser and never through a link in a text or email. Once there, use the Where's My Refund tool to track your refund status.

If you have concerns about your account, call the IRS directly at 1-800-829-1040.