Active scam waveIRS / government-impersonation text scam · verified active as of September 30, 2026

Got an “IRS” text with a link? Paste the exact link here for a free instant scam check ↓

Free risk-score preview · full report with all 5 red flags for $4.99 · no subscription

No link handy?

IRS text scam: “claim your tax refund” or “settle your tax debt”?

Q: What are the red flags of the IRS tax-refund / tax-debt text scam?

An “unclaimed refund” you have to claim by link: The IRS doesn’t text you a link to release a refund. A surprise refund with a tap-here link is bait to harvest your identity. Threats of arrest, a lien or a suspended SSN: “Pay your tax debt now or face arrest” is intimidation. The IRS resolves balances by mailed notice and due process, not a threatening text. A link that isn’t the official IRS.gov site: The page copies the IRS but lives on a look-alike domain — often ending in .com, .top or .vip, or with “irs” jammed into a longer name — never the real .gov. Requests for your SSN, bank or card details: Entering your Social Security number, date of birth or bank details on a texted page hands the scammer everything they need. Demand for gift cards, crypto or a wire: The IRS never takes payment in gift cards, cryptocurrency or wire transfers. Any such demand is a scam, full stop.

Texts claiming you have an unclaimed IRS refund — or an overdue tax debt with an arrest threat — are circulating hard. The IRS never texts links. Check yours free.

What’s happening

A wave of texts impersonating the IRS is circulating: some dangle an “unclaimed tax refund” you can collect by tapping a link and “verifying” your details; others threaten arrest, a lien or a suspended Social Security number over an “overdue tax debt” unless you pay right now. The IRS and its Security Summit partners warn about this exact smishing every filing season and it spikes around refund and deadline windows.

The link opens a page that copies the real IRS site (IRS.gov) and asks for your Social Security number, date of birth, bank or card details — everything needed to steal your refund or your identity. Payment variants demand gift cards, crypto or a wire, which are impossible to claw back.

The IRS does not initiate contact by text, email or social media to request personal or financial information, and it never demands immediate payment by gift card, crypto or wire. Don’t tap the link — paste it for an instant risk score, then check any real tax matter at IRS.gov, which you type in yourself.

What a real message looks like: The IRS never initiates contact by text and never asks for card, bank or SSN details via a link — real notices come by mail and are verifiable at IRS.gov.

5 red flags of the IRS tax-refund / tax-debt text scam

If the message you got shows any of these, treat it as a scam. Not sure about the link? Paste it above and our report grades every signal and tells you exactly what it found.

1. An “unclaimed refund” you have to claim by link

The IRS doesn’t text you a link to release a refund. A surprise refund with a tap-here link is bait to harvest your identity.

2. Threats of arrest, a lien or a suspended SSN

“Pay your tax debt now or face arrest” is intimidation. The IRS resolves balances by mailed notice and due process, not a threatening text.

3. A link that isn’t the official IRS.gov site

The page copies the IRS but lives on a look-alike domain — often ending in .com, .top or .vip, or with “irs” jammed into a longer name — never the real .gov.

4. Requests for your SSN, bank or card details

Entering your Social Security number, date of birth or bank details on a texted page hands the scammer everything they need.

5. Demand for gift cards, crypto or a wire

The IRS never takes payment in gift cards, cryptocurrency or wire transfers. Any such demand is a scam, full stop.

Paste the link to check it now — free

We check the link and hand you an intelligence report — we don’t recover funds, execute takedowns, or give legal advice.

What to do right now

1Don’t tap the link or pay anything — paste the link into Scam Detective for an instant risk score first.

2Check any real refund or balance by typing IRS.gov yourself (use “Where’s My Refund?”), never the text’s link or number.

3Report IRS smishing by forwarding the text to [email protected], then report it to the FTC at reportfraud.ftc.gov and delete it.

How to spot the fake link

The link is not the official IRS.gov domain — genuine IRS pages end in .gov.

A real-looking “irs.gov” spliced in front of a throwaway domain — e.g. irs.gov-refund.top.

Look-alike endings like .com, .vip, .top, .cc or .icu, or “irs”, “tax” or “refund” bolted into a longer name.

The text pressures you with a refund deadline or an arrest/lien threat and a pay-now or verify-now link.

Not sure? You don’t have to eyeball it — paste the link above for a free 0–100 risk score, then unlock the full report with all five red flags and your 3-step plan for $4.99.

Is your brand being spoofed in scam texts?

Scams like this impersonate the IRS and state tax authorities — but small and mid-sized brands get copied too. Our Brand Impersonation Audit researches the look-alike and typosquat domains impersonating your brand, with evidence and a risk rating for each, plus a ready-to-send takedown-request template. Two one-time tiers, no subscription.

Get a Brand Impersonation Audit — from $99

Audit ($99) or Audit Pro ($299) for a deeper, wider investigation · see a sample audit.