Tax season is when most people are thinking about deadlines and refunds. Scammers are thinking about something else: stealing your personal data so they can file a fake return in your name and grab your refund.
Picture Bob, the lamp mogul, checking his phone between client calls. A text pops up: “IRS notice: your refund is on hold. Verify now.” Bob clicks, enters his info, and—boom—someone else “files” his tax return before he does.
Let’s make sure that doesn’t happen to you.
Why Tax Season Is the Scammer’s “Super Bowl”
Criminals ramp up tax-season attacks because urgency is high and attention is low. They impersonate the IRS (logos, letterheads, look-alike websites, even fake social accounts), hoping you’ll hand over:
- Social Security numbers
- Bank logins and routing details
- Credit card info
- IRS Online Account credentials
And once they have it, the damage spreads fast—refund theft, new loans opened, credit lines drained, even government benefits claimed in your name.
The Modern Scam Playbook: Phishing, Smishing, Vishing—And AI
You’ll see scams through email (phishing) and text (smishing)—and increasingly phone calls (vishing). The scary twist: messages can now feel highly personalized, and voices can be faked to sound “official.”
One key truth still holds: the IRS generally starts contact by mailing a letter, and they don’t initiate contact by text or social media asking for personal or financial information.
Red Flags That Should Stop You Instantly
If you spot any of these, slow down and verify independently:
- “Act now” pressure: threats of arrest, deportation, frozen accounts, or “final notice.”
- Refund bait: surprise refunds, “IRS surveys,” or “verify to receive your payment.”
- Weird payment methods: gift cards, wire transfers, crypto, or “pay immediately by phone.”
- Link tricks: look-alike URLs that aren’t an official IRS site.
- Sender mismatch: an email address that almost looks right, but isn’t.
When in doubt: don’t click. Open your browser and go directly to the IRS site, or use your IRS Online Account for anything refund/identity related.
Why Seniors Get Targeted (And Why It Can Trigger Tax Headaches)
Scammers often target people 65+ because retirement savings and steady benefits can be vulnerable to high-pressure tactics. If someone is tricked into pulling money from a retirement account, that distribution may create unexpected tax consequences (and potentially penalties if they’re under 59½).
Best protection is simple and powerful: family communication. Encourage relatives to run any “IRS message” past a trusted person before acting.
Don’t Get Spooked by a “Ghost Preparer”
Not every tax scam is digital. Some wear a professional mask.
A ghost preparer is someone who prepares your return but refuses to sign it (or include their PTIN). That’s a giant red flag, because it leaves you holding the bag if the return is wrong. The IRS warns taxpayers about this directly, and also provides resources for choosing a qualified preparer.
Rule of thumb: never sign a blank return, and always demand a full copy of what was filed.
Business Owners: The “W-2/Payroll” Ambush Is Real
If you run a business, criminals may target your team with “urgent” emails pretending to be an executive, requesting W-2s or payroll data. Build a culture where accuracy beats speed:
- Require a call-back verification for sensitive requests
- Use two-person approval for payroll/tax data releases
- Train staff regularly on spoofing and urgency traps
Your Best Defense: The IRS IP PIN
If you only do one thing after reading this, do this:
Get an IP PIN.
An Identity Protection PIN (IP PIN) is a unique six-digit number used to help prevent someone from filing a tax return using your SSN/ITIN. The fastest way to get it is through your IRS online account.
What to Do if You Think You’re a Victim
Common sign: you try to e-file and the IRS rejects it because a return was already filed under your SSN.
Steps to take:
- Document everything (dates, names, letters, screenshots).
- File the IRS Identity Theft Affidavit, Form 14039 (it can also be completed online).
- Stay enrolled in (or obtain) an IP PIN going forward.
Report scam attempts (yes, it matters)
If you receive a suspicious tax email or message, the IRS instructs taxpayers to report it, including forwarding phishing emails to [email protected]. For IRS/Treasury-related text messages, you can send details to that email with the subject line “Text.”
Final Word From JS Morlu
Scams evolve, but your protection strategy doesn’t have to be complicated: verify independently, use an IP PIN, avoid shady preparers, and don’t let urgency override common sense.
If you received a suspicious IRS notice, got an e-file rejection, or want help tightening your personal or business tax-security setup, JS Morlu can help you sort it out and stay compliant—without the panic.