IRS scams and fake letters: How to verify a notice

The short answer

If an IRS letter, call or message looks suspicious, stop using that contact channel and verify it independently. Do not pay, scan a QR code, open an attachment or send identification just because the sender knows your name or uses an IRS logo.

Go directly to IRS.gov. Search the notice number, check any available notice in your IRS Online Account, and contact the IRS using details obtained from its official website. The IRS's notice-verification guidance directs people with a suspicious letter to 800-829-1040.

Verification does not mean ignoring a real tax problem. Keep the letter and envelope, record any printed deadline, and promptly establish what action the IRS actually requires. A scam report does not extend a real response, hearing or court deadline.

How to verify an IRS notice in five steps

1. Preserve the letter without following its payment instructions

Keep the envelope and every page. Note the CP or LTR number, date, tax period, amount and requested action. A genuine CP14 balance-due notice and a CP2000 income-matching proposal mean different things; a generic demand to “clear your account” is not an explanation.

Treat the phone number, payment address, QR code and website printed on an unverified letter as unverified too. Do not let a suspicious letter authenticate itself by calling only its own number.

Accurate personal details do not prove the sender is the IRS. A convincing document can copy a real notice code, government seal or language from a legitimate letter. Poor spelling can be a warning sign, but excellent spelling is not proof of authenticity.

2. Search IRS.gov independently

Type IRS.gov into your browser and use the official IRS notices and letters search. Compare the stated purpose of the notice with what your letter asks you to do.

Finding a matching code explains what that notice normally means; it does not authenticate your particular copy. Conversely, a missing search result does not prove fraud. The IRS instructs taxpayers to call for verification when a letter is not found or looks suspicious.

A search advertisement, a displayed link label or a padlock icon is not IRS authentication. Check the actual destination. For example, the text irs.gov.example.com describes a different domain, not IRS.gov. Begin sensitive account activity from the official site rather than a link in the suspect message.

3. Check your IRS Online Account, with an important limit

Reach your account through IRS.gov. Look for the relevant balance, period, available notice and payment history. Compare those records with your letter.

Only certain notices and letters are available online. Absence from the online account is not proof that a notice is fake. A suspicious discrepancy calls for further verification; it is not permission to discard the letter.

An account transcript can help reconcile assessments and payments, but a transaction such as TC 971 does not authenticate a specific piece of mail. Neither a transcript nor an online balance replaces the actual notice's instructions.

4. Use an independently obtained IRS contact

The IRS's notice guidance gives 800-829-1040 for a letter that looks suspicious or cannot be located in the notice search. Start with that official guidance, not a number supplied by the suspected sender.

Ask whether IRS records correspond to the notice code, tax period and action described. If a particular employee or office is handling the case, ask how to confirm that contact and obtain a copy of any missing letter through an approved channel.

Once a notice and its case contact are verified, the case-specific number may be the appropriate way to respond. The point is independent authentication—not a rule that every number printed on an IRS letter must be wrong.

5. Preserve the real response deadline

After authentication, follow the verified notice's instructions. If you disagree, determine how and where to respond; if you owe but cannot pay, compare resolution options.

Do not assume every IRS letter allows 30 days, or that reporting a suspicious contact stops collection or extends appeal rights. If an actual deadline is near, obtain qualified assistance while you verify. Keep a record of calls, copies and proof of submission.

What the IRS never does—and which warnings need qualification

The IRS's current reporting guidance says it does not call to demand payment now or threaten arrest. Its current contact guide says a social-media direct message is never from the IRS. These are stronger warnings than judging whether a document looks “official.”

Stop and verify when a supposed IRS contact:

• Threatens immediate arrest unless you pay during the call.
• Insists you buy gift cards or disclose their redemption codes to settle a federal tax bill.
• Directs you to a caller-controlled cryptocurrency wallet, a personal payment account or another unverified destination.
• Demands your online-account password or a login verification code to cancel a warrant or unlock a refund.
• Sends a social-media direct message claiming to handle your tax balance.
• Tries to prevent you from independently checking the request or obtaining advice.

Use IRS.gov/payments to establish legitimate payment options. Do not assume a demand is safe simply because it uses a familiar payment app, bank transfer or card.

Some popular “never” rules are too broad. The IRS can make legitimate calls, send opt-in electronic communications and conduct limited visits. It can ask identity-verification questions during a legitimate interaction. That does not mean an unexpected caller is entitled to your information; authenticate the channel first.

Real IRS contact vs. common impersonation tactics

The current IRS contact guide describes opt-in taxpayer email and text communications. It also describes some automated calls that direct people to IRS.gov without sharing specific details, and separately describes special-agent calls or emails connected with criminal investigations. Do not apply an old blanket claim that the IRS never sends any text or automated message, or decide authenticity from the medium alone.

Opting in does not make every later message genuine. A display name, familiar-looking sender address or spoofed caller ID can mislead you. Access the account independently instead of replying with passwords, bank information or identity documents.

What if someone claiming to be the IRS comes to my door?

In-person visits are uncommon, and unannounced visits are rare. Revenue officers generally arrange contact in advance; the IRS describes appointment letters and procedures. Revenue agents, revenue officers, fuel inspectors and Criminal Investigation special agents have different roles.

There are exceptions to advance notice. For example, Criminal Investigation special agents may call or visit unannounced, and fuel inspectors have particular inspection authority. A lack of a prior letter is therefore not conclusive proof of impersonation.

Consult the IRS's identification and visit guidance. Revenue officers, revenue agents and fuel inspectors carry specified credentials; special agents present law-enforcement credentials. The page links an IRS-CI employee-verification tool and explains that it is not available during every enforcement action.

Do not turn this into a confrontation or hand money to a stranger because a badge looks convincing. If you feel unsafe, call 911. If the situation involves a criminal investigation, obtain legal advice rather than treating a general scam checklist as a ruling on the visitor's authority.

Avoid another overbroad rule: “The IRS never accepts cash.” The current IRS guide describes cash and other permitted payments during legitimate, verified revenue-officer visits. That does not authenticate an unexpected cash demand or a courier. Establish the contact and payment method independently.

Private collection agencies: legitimate does not mean unverified

The IRS uses private agencies for some inactive tax debts. That is different from a tax-relief company advertising that it can settle your debt.

According to the IRS private-collection instructions, you receive two letters before agency contact: IRS Notice CP40 assigning the account, followed by the agency's initial letter. Both contain a taxpayer authentication number.

Use the IRS's current agency list and its process for exchanging portions of that number to verify each other. This number is not your online-account password or a login security code. Do not publish it or send a stranger your entire file to prove who you are.

The IRS says the agency should be courteous and should not threaten you. If the letters are missing or inconsistent, verify the assignment through official IRS channels and records before sharing information or arranging payment.

An unsolicited “tax lien resolution,” “final settlement” or “pennies on the dollar” advertisement is not automatically an IRS notice. A real tax debt can attract marketing. The advertised business's knowledge of a balance or lien does not make it a government agency, establish eligibility for relief or authenticate its payment instructions.

If you already clicked, paid or shared information

Take action promptly without assuming that every exposure has the same consequences.

1. Stop contact and further payments. Do not pay another fee to “release” money or hire a purported recovery service that contacted you unexpectedly.
2. Contact your bank or payment provider independently. Describe the suspected fraud and ask whether the transaction can be stopped, recalled or disputed. Recovery is not guaranteed, but prompt reporting matters.
3. Protect affected accounts. If you disclosed credentials, use a trusted device and the real account provider's recovery process. Change compromised passwords, secure related email and enable multifactor authentication. Do not install remote-access software at the caller's direction.
4. Follow official identity-theft recovery steps. The IRS directs victims to IdentityTheft.gov and its own steps after a scam. These address financial protection, tax-account monitoring and identity protection.
5. Address actual tax-related misuse. A suspicious message alone does not establish that someone filed a return in your name. If there is evidence of a fraudulent return or another tax-account problem, follow the IRS's situation-specific instructions rather than submitting every identity-theft form automatically.
6. Preserve evidence privately. Keep correspondence, numbers, timestamps, payment receipts and details of information disclosed. Do not post your notice, transcript, SSN or bank information in a public forum or upload them to TaxRZR.

The IRS recovery page also describes Identity Protection PINs and assistance for tax-related identity theft. An IP PIN is a protection against fraudulent tax-return filing; it is not a guarantee that all identity misuse stops or money will be returned.

For rejected returns, situation-specific Form 14039 instructions, IP PINs and ongoing account monitoring, continue with tax identity theft recovery. A verification letter has its own response process; use the 5071C guide if that is the code on your letter.

How to report fake IRS calls, emails, texts and letters

Use the IRS reporting page for the contact type involved. Reporting routes differ.

• Suspicious email: Do not reply, click links or open attachments. The IRS provides instructions for sending the suspicious message to phishing@irs.gov, preferably as an attachment or with headers using your mail application's features. Follow those instructions; do not open a suspect file to investigate it yourself.
• Suspicious text: Do not reply or click. The IRS asks for the sender, message content, recipient number and received date, time and time zone in a report to phishing@irs.gov. Follow its current reporting instructions and then delete the original.
• IRS impersonation call: Record the number and hang up. Report through the Treasury Inspector General for Tax Administration hotline or 800-366-4484, as listed by the IRS.
• Fake or misleading mail: First authenticate any claimed IRS notice. The IRS reporting page directs tax-related mail scams to postal and consumer-protection resources, including the Federal Trade Commission. Keep the envelope and copies for your report.

Reporting to a fraud authority is not the same as responding to a legitimate tax notice. Handle both issues if your real account still requires action.

A short verification script

When you reach the IRS through an independently verified channel, you can say:

“I received a letter dated [date] with notice number [number] about tax year [year]. I am verifying that it is authentic before following its payment or document-upload instructions. Can you confirm the notice and explain how I should respond securely?”

Use your IRS Communication Log to record the date, representative, confirmed action and response deadline. The first-call script can help organize a longer conversation.

Do not use a scammer's demand to avoid a verified bill, and do not use a verified bill to justify sending money to an unverified caller. The debt and the contact are separate things to establish.

Can a letter with a real IRS notice number be fake?

Yes. A real notice number can be copied. Look up the code to understand its usual purpose, then independently verify the particular letter, tax period and requested action.

Does the IRS ever send emails or text messages?

Yes. Current IRS guidance describes opt-in emails and texts. That does not authenticate an unsolicited refund offer or a message requesting credentials; reach your account independently through IRS.gov.

Is my notice fake if it is not in my IRS Online Account?

Not necessarily. Only certain notices are available online. Verify a missing or suspicious letter with the IRS rather than discarding it solely because you cannot see an online copy.

Should I call the number on a suspicious IRS letter?

Do not rely on that number to authenticate the same letter. Start with contact details independently obtained from IRS.gov; the IRS notice page lists 800-829-1040 for suspicious letters.

Does reporting an IRS scam stop a notice deadline?

No. Reporting suspected fraud does not itself extend a legitimate response, hearing or court deadline. Verify promptly and protect any real rights while the suspicious contact is investigated.

Can TaxRZR authenticate my letter if I upload it?

No. This guide does not offer notice uploads or authenticate individual letters. Keep personal tax records private and use independently verified IRS channels for your case.

Official sources and review status

IRS sources checked October 30, 2026 (US Eastern time). Prepared by the TaxRZR editorial team; professional review is pending. This is general federal tax education, not an authenticity determination or legal advice for a particular contact.

The current IRS contact and reporting pages are used here rather than older blanket descriptions of calls, electronic messages or visits.

• IRS: How to know it is the IRS
• IRS: Understanding your notice or letter
• IRS: Recognize tax scams and fraud
• IRS: Report fake emails, messages, calls and letters
• IRS: Private debt collection and authentication
• IRS: If you were scammed

See Source Notes for dated editorial changes. Once you have authenticated your notice, use the first 72 hours guide to organize your response.