The IRS almost never emails you first

The single most reliable way to know an IRS email is fake: the IRS does not send unsolicited emails. If you received an email claiming to be from the IRS without having contacted them first, it is a scam. The IRS initiates contact by mail, not email. They send a physical letter to your address on file.

Scammers know this rule works in their favor. They count on people not knowing it. A convincing-looking email with IRS logos, official language, and a sense of urgency is designed to make you panic and click a link or open an attachment before you think it through.

If you are unsure whether you owe money or have a tax issue, you can contact the IRS directly. Do not use contact information from the email. Go to irs.gov, call the IRS at 1-800-829-1040, or visit a local IRS office. These are the only safe ways to reach them.

Key Takeaways

  • The IRS initiates contact by mail, never by email, so any unsolicited IRS email is a scam.
  • Real IRS mail comes from an address in Fresno, California; Philadelphia, Pennsylvania; or another IRS service center, not from a generic government email.
  • Scam emails often ask you to click a link, download an attachment, or provide personal information like your Social Security number or bank details.
  • If you think you may owe taxes or have a real IRS issue, contact the IRS directly using irs.gov or 1-800-829-1040, never using contact information from an email.
  • Report suspected IRS scam emails to the Treasury Inspector General for Tax Administration at phishing@irs.gov.

What real IRS mail looks like

Real IRS correspondence arrives as a physical letter in your mailbox. The envelope has an IRS return address from one of their service centers: Fresno, California; Philadelphia, Pennsylvania; Ogden, Utah; Kansas City, Missouri; or Austin, Texas. The letter includes your name, address, and a specific notice number (like CP2000 or CP2501).

The letter explains what the IRS is contacting you about — usually a discrepancy on your return, a payment due, or a refund. It includes specific tax year information and dollar amounts tied to your actual return. Real letters give you clear next steps: pay by a certain date, respond with documentation, or call a specific number.

Real IRS mail never asks you to click a link or download anything. It does not ask for your password, PIN, or full Social Security number. If the letter says you owe money, it explains why and gives you options to pay or dispute it.

Red flags in IRS scam emails

Scam emails often use urgent language: "Your account has been locked," "Immediate action required," "Verify your information now," or "Your refund is pending." They create pressure so you will act without thinking. Real IRS letters give you time to respond — usually at least 30 days.

Scam emails ask you to do things the real IRS never asks in writing: click a link to "verify your account," download a form, or enter your Social Security number, bank account, or credit card information. They may ask you to call a number in the email. That number is not the IRS.

Watch for poor grammar, misspelled words, or awkward phrasing. Scammers often copy IRS language but make mistakes. The email address itself may look close to an official one but slightly off — for example, "irs-support@" instead of a real IRS domain. Real IRS emails do not exist, so any email address claiming to be from the IRS is suspicious.

Attachments in IRS emails are another red flag. The real IRS does not send tax forms, notices, or documents as email attachments. If an email claims to be from the IRS and has an attachment, it is a scam.

What to do if you receive a suspicious IRS email

Do not click any links or download any attachments. Do not reply to the email. Do not call any phone number in the email. Close the email and delete it.

If you are worried you may actually owe taxes or have a real issue with the IRS, contact them directly. Go to irs.gov and use their tools to check your account balance or find your nearest IRS office. Call 1-800-829-1040 during business hours. These are the only safe ways to reach the IRS.

Report the scam email to the Treasury Inspector General for Tax Administration. Forward the email to phishing@irs.gov. Include the full email header if possible — this helps them track the scammer. You can also report it to the Federal Trade Commission at reportfraud.ftc.gov.

How scammers use fake IRS emails

Scammers send these emails hoping you will panic and act quickly. They may ask you to pay a supposed tax debt using a wire transfer, gift card, or cryptocurrency — payment methods that cannot be reversed. Once you send money, it is gone.

Other scams ask you to click a link that takes you to a fake website that looks like irs.gov. You enter your Social Security number, date of birth, bank account information, or other details. The scammer now has enough information to steal your identity, open accounts in your name, or file a fraudulent tax return.

Some scam emails ask you to download a form or document. The attachment contains malware that infects your computer, giving the scammer access to your files and passwords.

Protecting yourself from IRS email scams

Never give out your Social Security number, bank account, credit card information, or passwords to anyone who contacts you by email, phone, or text — even if they claim to be from the IRS. The real IRS already has your Social Security number and tax information.

If you receive an email that looks official but you are not sure, do not click anything. Instead, contact the IRS directly using a phone number or website you find yourself, not one from the email. A quick call to 1-800-829-1040 can confirm whether the IRS is actually trying to reach you.

Keep your computer and phone updated with the latest security software. Use strong, unique passwords for your email and financial accounts. Enable two-factor authentication on accounts that offer it. These steps make it harder for scammers to access your information even if they trick you into giving them a password.

If you already gave out personal information

If you clicked a link, downloaded an attachment, or gave out personal information to a scammer, act quickly. Change the passwords on your email, bank, and financial accounts. Contact your bank and credit card companies to let them know you may be a victim of fraud. Ask them to watch your accounts for suspicious activity.

Place a fraud alert on your credit report by contacting one of the three major credit bureaus: Equifax, Experian, or TransUnion. A fraud alert tells lenders to verify your identity before opening new accounts in your name. You can also place a credit freeze, which blocks access to your credit report entirely.

File a report with the Federal Trade Commission at reportfraud.ftc.gov. This creates a record of the scam and helps law enforcement track patterns. If the scammer filed a fraudulent tax return in your name, contact the IRS at 1-800-829-1040 to report identity theft.

Frequently Asked Questions

Can the IRS contact me by email about a refund?

No. The IRS does not send emails about refunds, tax bills, or any other tax matter. If you are expecting a refund, you can check the status on irs.gov using the "Where's My Refund?" tool, or call 1-800-829-1040. Any email claiming to be about your refund is a scam.

What if the email has the IRS logo and looks exactly like the real IRS website?

Scammers are skilled at copying logos and design. The logo itself does not make an email real. The only reliable indicator is that the IRS does not send unsolicited emails. If you did not contact the IRS first, the email is a scam, no matter how official it looks.

Is it safe to call a phone number in an IRS email?

No. Any phone number in a suspicious email is controlled by the scammer. If you need to reach the IRS, use 1-800-829-1040 or visit irs.gov. These are the only safe contact methods.

What should I do if I think I owe taxes but I am not sure?

Contact the IRS directly using irs.gov or 1-800-829-1040. You can also check your account balance on the IRS website. Do not respond to or trust any email claiming to be from the IRS, even if you think you might owe money.