IRS Verify Identity: Step by Step Instructions and Scam Warnings for 2026

The IRS named impersonation scams the number one tax threat of 2026. Bolster AI identified 152 new IRS-themed domains registered this year alone, with 82% already actively malicious. If you received an email, text, phone call, or letter claiming to be from the IRS and you are not certain it is real, this guide tells you exactly how to verify it before responding. It also covers how to complete the actual IRS identity verification process if your contact turns out to be legitimate. If someone claiming to be from the IRS or a tax resolution service has reached out to you, run their phone number, name, or email through Social Catfish to verify who you are actually dealing with before handing over any personal information.

Why Fake IRS Contact Is So Convincing in 2026

Scammers impersonating the IRS are no longer sending obvious phishing emails full of typos and generic greetings. The 2026 wave is professionally coordinated and harder to detect than anything seen before.

Here is what the research shows:

• 152 new IRS-themed domains registered in 2026, 82% active and malicious within hours of registration
• 125 confirmed malicious IRS-themed URLs identified year to date
• Fake IRS lures break down as follows — 42% refund themes, 27% identity verification spoofs, 22% audit and enforcement fear tactics
• Scammers pull real personal details from past data breaches — your name, address, partial SSN — to make the contact feel legitimate
• Microsoft identified a phishing wave in 2026 targeting over 29,000 users across 10,000 organizations using IRS-themed lures
• Fake ID.me login pages are now common because ID.me is the official IRS verification provider — victims who have verified before do it again without hesitation

The goal in every case is the same: get you to hand over personal information, credentials, or money under the belief that the IRS is on the other end.

How to Verify If an IRS Email Is Real

The single most important rule: the IRS does not initiate contact by email. Ever.

If you received an unsolicited email claiming to be from the IRS asking you to verify your identity, click a link, confirm account information, or claim a refund, it is a scam. The IRS only contacts taxpayers through the U.S. mail. There are no exceptions to this rule.

Signs a fake IRS email is in your inbox:

• Generic greeting like “Dear Taxpayer” instead of your full legal name
• Urgent language demanding immediate action to avoid penalties, arrest, or account seizure
• A link or button directing you to verify your identity or confirm account details
• A QR code to scan — real IRS letters occasionally include QR codes but unsolicited emails with QR codes are always suspicious
• An email address that is not from irs.gov — scammers use domains like irs-gov.com, irs.support, or irs-refund.net to look official
• Requests for your SSN, bank account details, or password

What to do if you receive a suspicious IRS email:

• Do not click any links or scan any QR codes
• Do not reply or open any attachments
• Forward the email to phishing@irs.gov
• Go directly to IRS.gov and log in to your account to check for any actual notices

If the email included a phone number and you want to verify whether that number belongs to a real IRS office before calling it, run it through Social Catfish. A reverse phone search returns every account, business, and identity connected to that number, confirming whether it traces to a legitimate government operation or a scam call center.

How to Verify If an IRS Phone Call Is Real

The IRS does not call taxpayers demanding immediate payment or threatening arrest. If a caller is pressuring you to act immediately, that pressure itself is the scam.

Here is how real IRS phone contact works versus how fake calls work:

Real IRS calls:

• The IRS typically sends multiple written notices before calling
• IRS agents identify themselves by name and employee badge number
• They do not demand immediate payment via gift cards, wire transfer, or cryptocurrency
• They do not threaten arrest or deportation over the phone
• They will not ask for your credit or debit card number over the phone
• If you owe money, they will give you time to question or appeal the amount

Fake IRS calls:

• Caller demands immediate payment or verification to avoid arrest
• Caller already knows your name, address, and partial SSN — this comes from data breaches
• Caller ID shows an official-looking IRS number — scammers spoof these routinely
• Caller insists you pay via gift cards, wire transfer, cryptocurrency, or Apple Cash
• Caller threatens immediate consequences if you hang up

What to do if you receive a suspicious IRS call:

• Hang up without providing any information
• Do not call back any number the caller gave you
• Find the official IRS number yourself at IRS.gov and call that directly to check your account status
• If the caller claimed to be from a specific IRS office or gave you a badge number, verify whether that information is real

Before calling any number back or providing any details, run the caller’s phone number through Social Catfish. A reverse phone search shows you every identity, business, and online account connected to that number. If the number traces to a known scam operation, a foreign call center, or a spoofed line with no legitimate business history, you will know before engaging further.

Run a free search on Social Catfish

How to Verify If an IRS Letter Is Real

Fake IRS letters are the hardest scam to detect because they arrive through the mail just like real ones and can be designed to look nearly identical to official IRS correspondence.

Signs a letter is genuinely from the IRS:

• It is addressed to you at your current address
• It references a specific tax year
• It includes a specific notice or letter number — real IRS letters use numbers like 5071C, 4883C, 5447C, or 5747C
• It asks you to verify your identity or respond to a specific question about your return — not to make an immediate payment
• It provides a phone number to call or a website to visit for verification — specifically idverify.irs.gov

Signs a letter may be fake:

• It demands immediate payment to avoid arrest or legal action
• It asks you to pay via gift cards, wire transfer, cryptocurrency, or prepaid debit cards
• It includes a QR code directing you to verify your identity on a website you do not recognize
• It threatens consequences with an extremely short deadline — same day or next day
• The letter number does not match any known IRS notice format
• It asks you to call a number that is not on IRS.gov

How to verify a letter is legitimate before responding:

• Go directly to IRS.gov and log in to your IRS Online Account
• Check your account for any notices or letters that match what you received — real IRS correspondence will appear in your account
• Search the notice or letter number at IRS.gov to confirm it is a real IRS letter type
• Call the IRS directly at 800-829-1040 using the number you found on IRS.gov, not the number in the letter, to confirm whether the letter is genuine

If the letter references a person, company, or tax resolution service by name and asks you to contact them, verify that person or company through Social Catfish before making contact. Run their name, phone number, or email and confirm whether the identity behind the contact is real and whether they have been associated with known scam activity.

How to Verify the Identity of Someone Claiming to Be from the IRS or a Tax Service

This is the step most people skip and the one that matters most.

Whether it is a caller claiming to be an IRS agent, an email from someone claiming to work in IRS collections, or a letter from a tax resolution company claiming they can fix your IRS problem, verifying the identity behind the contact is the most important protective action you can take before responding.

Here is what Social Catfish can tell you about a contact claiming to be IRS-related:

• Whether the phone number they called from belongs to a real government operation or a known scam number
• Whether the name they gave you traces to a real person with a legitimate professional history
• Whether the email address they used is connected to a real business or a fraudulent domain
• Whether the tax resolution company they claim to represent is a legitimate operation or a fraud shell
• Whether any of the contact details have been previously flagged in connection with scam activity

This is especially important for tax resolution services companies that contact people claiming they can negotiate with the IRS on their behalf. The IRS itself lists these operations on its annual Dirty Dozen scam list. Before you pay an upfront fee, sign a power of attorney, or share your SSN with any company that contacted you unsolicited, run every piece of identifying information they gave you through Social Catfish.

Run a free search on Social Catfish

What to Do If You Already Responded to a Fake IRS Contact

If you submitted personal information, credentials, or money to a scammer posing as the IRS, act immediately.

If you shared your SSN or personal information:

• Place a fraud alert or credit freeze with Equifax, Experian, and TransUnion immediately
• Request an IRS Identity Protection PIN at IRS.gov — this prevents anyone from filing a return using your SSN
• Monitor your IRS Online Account for any returns filed under your name that you did not submit

If you entered credentials on a fake ID.me or IRS page:

• Change your ID.me password immediately
• Enable multi-factor authentication if not already active
• Contact ID.me support to flag your account for review

If you sent money:

• Contact your bank or financial institution immediately — wire transfers and gift card payments have almost no recovery path but reporting quickly is still essential
• Do not send any additional money regardless of what the scammer tells you — any promise to recover your funds by sending more is itself a follow-up scam

Report through these official channels:

• Forward suspicious emails to phishing@irs.gov
• Report to the Treasury Inspector General for Tax Administration at tigta.gov
• Report to the FTC at reportfraud.ftc.gov
• File with the FBI’s Internet Crime Complaint Center at ic3.gov

FAQ