Fraudsters have started sending counterfeit IRS letters to crypto holders, aiming to steal personal information and digital assets. These fake notices mimic official correspondence, referencing tax years from 2017 to 2026 and pressuring recipients to visit a so-called “Digital Asset Compliance Portal” that doesn’t exist.
The IRS confirmed it does not operate any such portal, warning taxpayers to be cautious. The bogus letters come in plain envelopes but include realistic details and urgent deadlines that could easily mislead anyone familiar with IRS communications.
How the scam tricks recipients
Inside these letters is a QR code that leads to a phishing website designed to look like an official IRS enrollment page. When scanned, victims are prompted to provide sensitive details or even transfer cryptocurrency directly to criminals. Coinbase raised the alarm two days before the IRS’s public warning, working alongside cybersecurity firm DarkTower to expose the scam’s sophisticated design.
This scheme exploits the fact that since 2019 the IRS has legitimately sent educational letters to taxpayers suspected of underreporting crypto income. Receiving IRS mail about digital assets is now common, so a second letter demanding compliance enrollment may not arouse suspicion.
If you get an IRS notice containing a QR code, stop immediately and verify. The IRS never includes QR codes in its official letters. This simple check can prevent falling victim to identity theft or crypto loss.
Scammers step up their game as government scrutiny of digital assets increases. In 2023 alone, IRS crypto-related investigations have surged, with thousands of taxpayers receiving compliance notices. Protecting your information is more critical than ever.
This article provides information and should not be taken as financial advice.
