Scam alert
A Text About an IRS Refund or Stimulus? Do Not Tap It
Published · United States · irs.gov · Arrives by a text, an email, or a QR code
The short answer
The Internal Revenue Service does not send unexpected texts or emails asking you to confirm a refund, claim a stimulus payment, or scan a QR code to reach its website. Item 1 on the IRS Dirty Dozen for 2026 is impersonation by email and text, including QR codes that lead to fake IRS pages built to collect personal information or to load unwanted software. In September 2026, reporting described a current text variant offering a $1,400 or $2,000 Economic Impact Payment and asking the recipient to confirm details so the money can be sent. The last real credit of that kind had a claim deadline in April 2025. A genuine IRS payment does not start with a text, and it does not need a form filled in from a link.
What is happening
The IRS published its 2026 Dirty Dozen on March 5 (IR-2026-30). First on the list is IRS impersonation by email, direct message, and text, often with alarming language and QR codes that send people to look-alike sites to verify an account, enter information, or claim a refund. The agency reported more than 600 social-media impersonators in fiscal year 2025 and reminded people that unsolicited IRS messages can also install malware. Separate September 2026 coverage described texts offering a final $1,400 stimulus-style payment, with some versions using $2,000, and a link to a copied IRS page asking for a name, a Social Security number, and bank details. The IRS's standing rule is that it normally makes first contact by mail, and it does not initiate texts asking for personal or financial information.
How to recognize it
- The message claims to be from the IRS and mentions a refund, a stimulus payment, a frozen account, or a need to verify your identity.
- It includes a link or a QR code instead of pointing you to a letter you should already have.
- The amount looks like a government payment, often $1,400 or $2,000 in the current texts.
- You are asked for a Social Security number, bank details, or a sign-in on a page you reached from the message.
- There is a short window attached, so that looking the claim up some other way feels costly.
What to do instead
- Do not tap the link or scan the QR code. Type irs.gov yourself if you want to look at an account.
- Ignore unexpected texts and emails that claim to be from the IRS. Real first contact is almost always a letter.
- If you are owed a refund, it is tracked inside your IRS online account or on a notice that arrived in the mail, not in a text.
- Forward suspicious IRS-related emails to [email protected], which is the address the agency publishes for this.
- Report the contact at ReportFraud.ftc.gov as well.
If it already happened
Responding to one of these is common and understandable. These steps are what people usually take next.
- If you entered a Social Security number or bank details, call your bank and ask them to watch the account.
- Change the password for any tax or email account you signed into from that page, using a device you trust.
- Consider a fraud alert or freeze with the credit bureaus, and use IdentityTheft.gov if personal information was shared.
- Tell the IRS at [email protected] and report it at ReportFraud.ftc.gov. Keep the message.
Common questions
- Does the IRS ever text people?
- Only in narrow cases where someone has already opted in, and not to ask for a Social Security number, bank details, or a QR scan to claim money. An unexpected payment text is not that.
- I am still waiting on a tax refund. How do I check it?
- Sign in at irs.gov using a bookmark or by typing the address, or wait for the paper notice. A text that offers to speed the payment up is asking you to skip that route.
- The page looked exactly like IRS.gov. How was I meant to tell?
- Copied pages are the point of this. The address bar is the check that still works: if you did not type irs.gov yourself, you are not on the IRS site, however close the layout looks.
Practice this safely
Practice typing irs.gov yourself instead of using a link or QR code in a tax message.
Every story is fictional. There is no timer, no score, and no real message, payment, or account.
Tell someone
Copy a short note you can paste into a text or email. It names the scam, the next step, and this page. Nothing is sent from this site.
A Text About an IRS Refund or Stimulus? Do Not Tap It The Internal Revenue Service does not send unexpected texts or emails asking you to confirm a refund, claim a stimulus payment, or scan a QR code to reach its website. Item 1 on the IRS Dirty Dozen for 2026 is impersonation by email and text, including QR codes that lead to fake IRS pages built to collect personal information or to load unwanted software. In September 2026, reporting described a current text variant offering a $1,400 or $2,000 Economic Impact Payment and asking the recipient to confirm details so the money can be sent. The last real credit of that kind had a claim deadline in April 2025. A genuine IRS payment does not start with a text, and it does not need a form filled in from a link. Read the full alert: https://endscamsproject.com/latest-scams/irs-text-email-qr-impersonation
Where this comes from
These links open the published sources in a new tab. The destination is shown before you open it.
The full guide on this
More recent alerts
This alert provides general educational information drawn from the sources above. It cannot determine whether a specific message you received is genuine, investigate an incident, or promise recovery or reimbursement.