Verify Your IRS Account Scam - How to Protect Yourself

Legally Authorized Methods

If the IRS genuinely needs to verify your identity or tax return information, they follow strict legal frameworks:

• U.S. Mail First: The IRS will almost always initiate contact through physical mail sent via the United States Postal Service.
• Official Notice Numbers: Legitimate letters contain specific notice tracking IDs, such as the Letter 5071C, 5447C, or CP5071 series.
• Direct Verification Portals: Real letters instruct you to manually visit the official IRS Return Verification Service or sign into your secure account through IRS.gov via ID.me.
• No Account "Renewals": Once you have verified your identity and set up your online account through ID.me, the IRS will never ask you to "renew" or "re-verify" your credentials out of nowhere.

Prohibited Actions and Risks

Scammers rely on aggressive, unauthorized communication tactics to catch you off guard:

• Unsolicited Digital Contact: The IRS does not initiate contact via random email, SMS text message, or social media direct messages.
• Urgent Expiration Threats: Phishing emails often claim that your account or "ID.me verification is expiring" and that you must act within 24 to 48 hours to avoid penalties.
• Fake Domains and Hyperlinks: Scam messages embed "Verify Now" or "Download Documents" buttons. Hovering over these reveals shady URLs (e.g., serveirc.com) rather than an official .gov address. Clicking them risks installing ransomware or spyware on your device.
• Demands for Sensitive Forms: Fraudulent mailings frequently attach fake W-8BEN or W-2 verification forms, demanding you reply with photos of your passport, driver's license, or bank routing numbers.

How to Protect Yourself

If you receive a suspicious message, do not reply or click any links. Log directly into your secure individual account on the official Internal Revenue Service website to check for legitimate alerts. You can report phishing emails by forwarding them as an attachment to phishing@irs.gov.