Spotting tax scams and how to help avoid them

Fraudsters know tax season is a busy time, relying on urgency and confusion to slip through the cracks. Cybercriminals can piece together information from public sources, social media, and past breaches to build convincing profiles. With personal details like your social security number, they can file a fraudulent return in your name and claim your refund. That same data can also be sold or used for other crimes.

The best defense? Stay proactive. File early, monitor your credit, and treat every request for personal information with caution. Scammers thrive on what’s already out there. Don’t make it easy for them.

Common tax scams to watch for

• Fake Messages and Websites: Scammers send emails or create fake websites that look like the IRS or a trusted tax service. Always verify the sender of any unexpected message by going directly to official sites and never click links in unsolicited messages.
• Business W-2 and Payroll Scams: Fraudsters pose as executives requesting employee tax forms or payroll data. These scams often target HR or finance teams. Verify any request through a known internal channel before sharing sensitive information.
• Impersonation Calls and Threats: Scammers call pretending to be IRS agents or law enforcement, demanding immediate payment or threatening arrest. Caller ID can be spoofed, so be cautious in trusting it. The IRS will never demand payment over the phone, by gift card, or cryptocurrency.

How the IRS contacts taxpayers¹

• The IRS will not contact you through social media to ask for personal information or to collect a tax debt. The IRS will normally initially contact you by letter delivered by the U.S. Postal Service. Visit the IRS.gov "Notices & Letters" site if you're unsure about a notification. Individuals can call the IRS at (800) 829-1040, and businesses can call (800) 829-4933.
• The IRS will not give you an ultimatum to pay up immediately using a specific payment method such as a prepaid debit card, gift card, or wire transfer.
• The IRS will not demand the taxpayer pay taxes without the opportunity to question or appeal.
• The IRS will not threaten to call law enforcement or take your citizenship status, driver's license or business license.
• In the case of a personal visit from someone claiming to be from the IRS, check for official credentials in the form of a pocket commission and HSPD-12 card.

How to help protect yourself against tax scams

• File early to help reduce risk. Fraudsters often submit fake returns before legitimate taxpayers do. Filing as soon as you can helps close that window of opportunity for fraudsters.
• Consider filing even if you’re not required. Submitting a return can prevent someone else from filing in your name and alert you if a fraudulent return already exists.
• Verify before you share. If you receive an email, call, or message claiming to be from a tax professional, financial institution, or government agency, confirm it independently. Use official contact details from IRS.gov—not what’s in the message.
• Don’t trust caller ID alone. Fraudsters can spoof phone numbers to look like law enforcement or other official sources. Always verify through a trusted channel.
• Limit personal information. Share only what’s necessary and keep track of where and with whom you share it. Be cautious on websites and social media and confirm the legitimacy of any request.

How to report tax fraud²

• Report any suspicious tax-related email to phishing@irs.gov.
• Visit irs.gov/help/report-fraud to connect with the official reporting channels of the IRS.
• If you’ve been a victim of fraud, take steps to protect your credit. Start by placing a free fraud alert with the three major credit bureaus—Equifax, TransUnion, and Experian. This signals lenders to verify your identity before opening new accounts. For stronger protection, individuals can consider a credit freeze, which blocks new credit inquiries entirely until you lift it.
• Contact your bank and other financial institutions and close any financial or credit accounts that might have been opened without your permission or compromised by identity thieves.

Learn more about avoiding cybersecurity and fraud threats

Visit huntington.com/privacy-security for insights, tools, and resources to help you stay ahead of fraud year-round.