An ID.me Email Scam

You need to verify your identity with ID.me to access benefits and services with The Internal Revenue Service.

Verify Your IRS Account

Dear Tax Professional,

To ensure the security of your IRS online account, we ask that you verify your identity through ID.me for this Extension tax season. This will help maintain uninterrupted access to your services.

Since you already have an ID.me account, you can easily complete your verification by following these steps:

1. Click the verification link below.
2. Sign in to your ID.me account.
3. Follow the instructions to verify your identity.

Note: Please verify your account as soon as possible to ensure continuous service.

Verify Now

How to Spot the Scam

• "Renewal" or "Expiration" Alerts: You do not need to renew or re-verify your ID.me account once it is set up. Any message claiming your verification is expiring is a scam.
• Urgent or Threatening Language: Scammers use phrases like "act now" or "your benefits are suspended" to panic you into acting without thinking.
• Fake Domain Names: Official ID.me emails only come from an @id.me or @mywallet.id.me address. Scammers use lookalike domains ending in .com or .net, such as @idme.com or @idme.net.
• Initial Contact via Email: The IRS never initiates contact with taxpayers via unsolicited emails, text messages, or social media channels to request personal or financial information. Legitimate IRS requests are sent through the U.S. Postal Service.

What You Should Do

• Do not click any links or download any attachments in the email.
• Do not provide personal details, passwords, multi-factor authentication (MFA) codes, or photos of your ID.
• Go directly to the source: If you need to access your tax information, safely log in by opening a clean browser tab and going straight to the official IRS Online Account Portal.
• Report the email: Forward the scam email as an attachment to phishing@irs.gov. If you believe someone is actively trying to use your identity on ID.me, fill out the official ID.me Report Suspicious Activity Form.