A tax message can create instant pressure.

It may say your refund is waiting. Your account is locked. Your payment failed. Your return needs correction. Your identity must be verified. Your tax transcript is ready. Your refund will be cancelled unless you act now.

The message may look official.

It may use tax words. It may include a logo. It may mention the IRS, Treasury, refund, payment, tax debt, identity verification, stimulus, transcript, or account warning.

Still, the safest first move is simple:

Do not click.

Tax scams work because people are already nervous during filing season. A scammer does not need you to read carefully. They need you to react quickly.

This guide shows how to verify before you click, pay, reply, or enter personal information.

The first rule: do not use the message as your doorway

If a tax text or email arrives unexpectedly, do not use its link, button, phone number, QR code, or attachment as your starting point.

Instead:

  • Close the message.

  • Open a browser yourself.

  • Type the official website address yourself.

  • Use a trusted bookmark.

  • Sign in only through an official account page.

  • Call using a number from an official source, not the message.

  • Check mailed notices separately.

This one habit blocks many scams.

A fake link can look close to real. A fake phone number can sound professional. A fake attachment can look like a tax document.

Do not let the message choose the path.

What tax scam messages often claim

Tax phishing and smishing messages usually create urgency or reward.

Common claims include:

  • Your tax refund is ready.

  • Your refund is delayed.

  • Your account is locked.

  • Your return was rejected.

  • You owe money immediately.

  • Your payment failed.

  • Your direct deposit information must be updated.

  • You qualify for a new credit.

  • Your tax transcript is available.

  • Your identity must be verified now.

  • You received an IRS notice online.

  • Your Social Security number is suspended.

  • Your tax account will be closed.

  • You must click to avoid penalties.

  • You must open an attachment to view the notice.

Some messages promise money.

Some threaten trouble.

Both can be scams.

Warning sign 1: It asks you to click a link

A link is often the trap.

The link may lead to a fake page that asks for:

  • Social Security number

  • Date of birth

  • IRS account login

  • Bank account number

  • Debit card details

  • Credit card number

  • Driver’s license

  • Selfie or ID photo

  • One-time verification code

  • Tax software login

  • Email password

  • Employer payroll login

If you entered this information, the scam may become identity theft, refund theft, account takeover, or payment fraud.

Do not click links in unexpected tax texts or emails.

Go to the official site yourself.

Warning sign 2: It asks for personal or financial information

Be suspicious if the message asks you to send or enter:

  • Full Social Security number

  • Bank details

  • Card details

  • Online account password

  • Tax software login

  • One-time code

  • W-2 or 1099

  • Photo ID

  • Employer information

  • Payroll login

  • Direct deposit details

  • Prior-year tax return

Your tax information is valuable.

A scammer can use it to file a fake return, redirect a refund, open accounts, or target you later with more convincing scams.

Treat tax documents like financial keys, not ordinary paperwork.

Warning sign 3: The message sounds urgent or threatening

Scam messages often try to remove your thinking time.

Watch for phrases like:

  • Immediate action required

  • Final warning

  • Your refund will be cancelled

  • Account locked

  • Legal action pending

  • Arrest warrant

  • Penalty notice

  • Respond within one hour

  • Verify now

  • Last chance

  • Suspicious activity

  • Do not ignore

  • Payment required today

Real tax problems should be handled seriously.

But panic language is not proof that the message is real.

A calm verification step is always allowed.

Warning sign 4: The message offers an unexpected refund

A fake refund message may feel less threatening, but it is still dangerous.

Be careful with:

  • “You are eligible for a refund.”

  • “Claim your tax rebate.”

  • “Refund waiting.”

  • “Update bank account for deposit.”

  • “Confirm details to release payment.”

  • “You qualify for a new credit.”

  • “Check your refund now.”

Scammers know that a refund promise can make people click faster than a threat.

Do not enter bank details from a refund text or email.

Check refund status only through official IRS tools or your known tax software account.

Warning sign 5: It includes an attachment

A tax email attachment may claim to be:

  • Refund notice

  • Tax transcript

  • Payment receipt

  • Audit notice

  • Account warning

  • Identity verification form

  • W-2

  • 1099

  • Penalty notice

  • Tax debt letter

  • Secure document

Do not open unexpected tax attachments.

Attachments can contain malware or lead to fake login pages.

If a document might be real, verify through a trusted account portal or official contact path.

Warning sign 6: It asks for strange payment methods

Scammers often demand payments that are hard to reverse.

Red flags include:

  • Gift cards

  • Cryptocurrency

  • Wire transfer

  • Payment apps

  • Prepaid cards

  • Cash deposit

  • QR code payment

  • Debit card number by message

  • Payment to an individual name

  • “Tax agent” wallet address

Do not pay taxes through instructions in an unexpected message.

Use official IRS payment options or trusted tax professional guidance.

No legitimate tax issue should require gift card numbers.

How the IRS normally gets your attention

Many taxpayers ask, “What if the IRS really needs me?”

That is a fair question.

The safest answer is this:

Do not decide from the text or email.

Verify from outside the message.

Use:

  • Your IRS Online Account

  • IRS notice or letter search tools

  • Official IRS phone numbers

  • Your tax professional, if you have one

  • Mailed notices you can verify

  • Tax software account you opened yourself

  • Official refund status tool

If a mailed notice arrives, do not panic either. Look up the notice number through official IRS resources and compare details.

A real notice should still survive verification.

The 5-minute verification routine

When you receive an IRS-looking text or email, use this routine.

Minute 1: Stop

Do not click, reply, download, call, or pay.

Take a screenshot if needed.

Minute 2: Check the request

Ask:

  • Is it asking for money?

  • Is it asking for personal information?

  • Is it asking for a login?

  • Is it asking me to click?

  • Is it asking me to open an attachment?

  • Is it urgent or threatening?

If yes, treat it as suspicious.

Minute 3: Use your own path

Open a browser or official app yourself.

Do not use links in the message.

Minute 4: Check your real account or notice

Look for the issue through an official account, official refund tool, known tax software account, or verified mailed notice.

Minute 5: Report or delete

If suspicious, report it using IRS instructions.

Then delete it.

Do not keep returning to the message and wondering.

How to report a suspicious IRS text

If you receive a suspicious text claiming to be from the IRS or related to taxes, do not click the link.

Take a screenshot if helpful.

Forward the text to the IRS reporting number:

202-552-1226

The IRS may ask for the number that sent the text.

Follow the IRS reporting instructions carefully.

After reporting, delete the message.

How to report a suspicious IRS email

If you receive a suspicious tax email:

  • Do not click links.

  • Do not open attachments.

  • Do not reply.

  • Forward the email to phishing@irs.gov.

  • Include the full email headers if you know how.

  • Delete the email after reporting.

If you already clicked, opened a file, or entered information, take extra steps quickly.

What to do if you clicked

If you clicked a suspicious tax link but did not enter information:

  • Close the page.

  • Do not download anything.

  • Run a security scan if appropriate.

  • Watch for new suspicious messages.

  • Change passwords if you logged in anywhere suspicious.

  • Enable multi-factor authentication on tax, email, and financial accounts.

If you entered personal information:

  • Change affected passwords.

  • Secure your email account.

  • Contact your bank or card issuer if financial details were entered.

  • Consider placing a fraud alert or credit freeze.

  • Watch IRS guidance for identity theft steps.

  • Consider getting an IRS Identity Protection PIN if eligible.

  • Report the scam.

If you entered a one-time code, act quickly. That code may have allowed account access.

What to do if you paid

If you paid through a scam message:

  • Contact the payment provider immediately.

  • Ask whether the payment can be stopped, reversed, disputed, frozen, or reported.

  • Save all receipts and screenshots.

  • Report the message.

  • Contact your bank or card issuer if a bank or card was used.

  • Watch for recovery scams.

  • Do not send more money.

Recovery scams are follow-up scams that claim they can recover your money for a fee.

Do not trust someone who contacts you promising guaranteed recovery.

Protect your tax accounts before a scam arrives

You can reduce risk before tax season.

Do these:

  • Use strong, unique passwords for email, IRS, tax software, and financial accounts.

  • Turn on multi-factor authentication where available.

  • Keep your email account especially secure.

  • Save tax documents in a protected folder.

  • Do not email sensitive tax documents casually.

  • Use secure portals with tax professionals.

  • Shred paper tax documents you no longer need.

  • Keep W-2s, 1099s, and Social Security numbers private.

  • Be careful with public Wi-Fi when accessing tax accounts.

  • Review bank deposit details before filing.

Your email account is especially important because password resets often go there.

If someone takes over your email, they may reach tax software, banking, or document storage accounts.

Watch for tax software impersonation

Not every tax scam says “IRS.”

Some pretend to be:

  • Tax software company

  • Payroll provider

  • Employer

  • Bank

  • State tax agency

  • Refund tracking service

  • Tax preparer

  • Document upload portal

  • Identity verification service

The same rule applies.

Do not click unexpected links.

Go directly to the account or contact the company through a known channel.

Watch for employer or W-2 scams

Some tax scams target workers and employers.

A message may ask for:

  • W-2 copy

  • Payroll login

  • Direct deposit change

  • Employee tax form

  • HR verification

  • Social Security number

  • Tax withholding update

If a message appears to come from HR, payroll, or your employer, verify through an internal channel you already trust.

Do not send tax forms or personal details because an email sounds official.

Use a family tax-scam rule

Families can make tax season safer with one shared rule:

No one clicks tax links from texts or emails.

Add:

  • We open tax accounts ourselves.

  • We do not send Social Security numbers by text.

  • We do not read one-time codes to anyone.

  • We do not pay taxes through gift cards, crypto, or payment apps.

  • We report suspicious IRS messages.

  • We ask before uploading tax documents.

  • We use a secure tax folder.

This matters when multiple people in a household receive tax messages, share devices, or help each other file.

A realistic example

A taxpayer receives a text:

“IRS Refund Alert: Your refund is on hold. Verify your bank information now.”

There is a link.

The taxpayer is expecting a refund, so the message feels believable.

But the warning signs are clear:

  • Unexpected text

  • Refund promise

  • Bank verification request

  • Link

  • Urgency

The taxpayer does not click.

They open a browser, go to the official IRS site, and check refund status through the official tool. Nothing shows a bank problem.

They forward the suspicious text to the IRS reporting number and delete it.

The important part is not that they recognized every technical clue.

They used the right routine.

Stop. Verify outside the message. Report. Delete.

The IRS text or email checklist

Before clicking anything, ask:

  • Did I expect this message?

  • Is it asking me to click a link?

  • Is it asking for personal or financial information?

  • Is it asking for a password or one-time code?

  • Is it offering an unexpected refund?

  • Is it threatening penalties, arrest, account lock, or urgent action?

  • Is there an attachment?

  • Is it asking for gift cards, crypto, payment app, wire, or prepaid card?

  • Is the sender address or phone number strange?

  • Can I verify this through my official account or a mailed notice?

If the message fails this check, do not click.

Final thought

A tax scam message does not need to look sloppy.

It may look official, timely, and personal.

That is why the safest rule is not “click if it looks real.”

The safest rule is:

Never use an unexpected tax text or email as your doorway.

Open the official site yourself. Check your real account. Verify mailed notices. Report suspicious messages. Delete the scam.

Tax season already has enough paperwork.

Do not let one rushed click become a bigger problem.