Malicious actors are mailing out paper letters that mimic official correspondence from the U.S. Department of the Treasury and the IRS. The letters urge Americans to urgently register on a platform called the Digital Asset Compliance Portal. The IRS insists: no such service exists.
The letters contain QR codes leading to a phishing website disguised as the official tax service website. After clicking the link, the potential victim is prompted to specify the cryptocurrency exchange or wallet they use, including Coinbase, Kraken, and Ledger, as well as the amount of crypto assets held.
"Criminals continue to abuse the public's trust in government institutions by creating convincing fake websites and correspondence that looks official," said Jarod Koopman, Chief of the U.S. Internal Revenue Service Criminal Investigation Division.
According to the division, the infrastructure for the fraud scheme was created just days before the mailing campaign began, and the domain for the fake site was registered through a Hong Kong-based registrar.
The U.S. Internal Revenue Service assured that it does not require taxpayers to provide cryptocurrency wallet data through third-party websites or to click links from suspicious messages. The agency urged Americans to verify the authenticity of notifications through official channels of communication—for example, by calling a phone number.
Previously, the U.S. Federal Bureau of Investigation reported on a fraud scheme on the Tron network targeting cryptocurrency wallet owners.
end-content
