Every year, scammers impersonate the IRS, Treasury, and other tax authorities to trick people into giving away personal and financial information. These phishing attempts happen through emails, calls, texts, websites, and even social media. Knowing how to report these scams helps protect you—and others—from fraud.

Below is a clear guide on how to report suspicious IRS or tax-related communications depending on how the scam contacted you.

1. Reporting Suspicious Emails

If you receive an email pretending to be from the IRS or Treasury:

• Fake IRS or Treasury emails
  
  

• W-2 related business email scams
  
  

• Phishing emails targeting tax professionals
  
  

• “Advance fee” investor scams

What to do:
Forward the suspicious email to phishing@irs.gov.

2. Reporting Suspicious Social Media Messages

The IRS never sends private messages through social media.

If you receive a DM claiming to be from the IRS:

1. Report the account to the social media platform.
   
   

2. Email the full URL of the fraudulent account to phishing@irs.gov, subject line: Social media.
   
   

3. You may also report it to:
   
   

   • Treasury Inspector General for Tax Administration (TIGTA)
     
     

   • Federal Trade Commission (FTC)
     
     

   • Internet Crime Complaint Center (IC3)
     
     

3. Reporting Suspicious Text Messages

The IRS does not send text messages without your permission.

If you receive a suspicious IRS or Treasury text:

• Do not reply, click links, or open attachments.
  
  

Email the following to phishing@irs.gov with the subject line “Text”:

• Sender’s phone number
  
  

• The text message content
  
  

• Your phone number
  
  

• Date, time, and time zone received
  
  

Then delete the message.

You can also:

• Forward the text to 7726 (SPAM)
  
  

• Report the scam to the Federal Trade Commission
  
  

4. Reporting Suspicious Websites

If a website tries to charge you for an Employer Identification Number (EIN):

1. Dispute the charge with your bank or credit card company.
   
   

2. Report the website to the Federal Trade Commission (FTC).
   
   

Remember: Getting an EIN from the IRS is free.

5. Reporting Suspicious Phone Calls

IRS-Related Calls

The IRS or approved private collection agencies may call you, but they will never:

• Demand payment immediately
  
  

• Threaten arrest
  
  

• Call to tell you about a “refund”
  
  

If you get a suspicious call:

• Record the number
  
  

• Hang up
  
  

• Report it to TIGTA at the hotline or call 800-366-4484
  
  

Tax Debt Relief Scams

If someone calls you offering “urgent” tax debt relief:

• Record the number
  
  

• Hang up
  
  

• Report it to:
  
  

  • Federal Communications Commission (FCC)
    
    

  • Federal Trade Commission (FTC)
    
    

6. Reporting Suspicious Mail

If you receive a letter claiming to be from the IRS:

• Verify the notice on the IRS website.
  
  

• Access or sign up for your IRS account to view official notices.
  
  

Scam mail related to unclaimed refunds, tax liens, or debt relief should be reported to:

• United States Postal Service
  
  

• Federal Trade Commission
  
  

• Your state attorney general’s consumer protection office
  
  

The FTC also provides tips on reducing junk mail.

Private Debt Collection Letters

The IRS uses private agencies for some tax debts, but you will always receive letters from the IRS first. Learn how the process works before responding.

7. Reporting Suspicious Fax Messages

Form W8-BEN Scams

If you receive a suspicious fax or email about Form W8-BEN:

• Report it to phishing@irs.gov, subject line: W8-BEN
  
  

If it's an email, send it with:

• The full email header
  
  

• A file attachment (preferred) or “forward as attachment”
  
  

You may also report it to TIGTA.

EFIN Fax Scams (Tax Professionals)

If you receive a suspicious request to fax your EFIN:

1. Report data theft immediately to your stakeholder liaison.
   
   

2. Report the fax to:
   
   

   • phishing@irs.gov, subject line: EFIN
     
     

   • The tax software provider being impersonated
     
     

   • TIGTA
     
     

8. Important Reminder for Businesses

The IRS does not allow its name, logo, or similar variations (like lRS, 1rs, etc.) to be used in security training or phishing simulation exercises.