The IRS Criminal Investigation unit has issued a warning to cryptocurrency holders about a sophisticated phishing scheme. It uses official-looking paper letters to steal personal data and digital assets. The scam is built around a fake Digital Asset Compliance Portal, a portal the IRS confirms does not exist.
Crypto holders receive a letter that appears to be from the IRS, complete with official formatting and a deadline. Moreover, the letter instructs recipients to enrol in the non-existent Digital Asset Compliance Portal before that deadline.
Inside the letter is a QR code; scanning it takes the recipient to a spoofed IRS website designed to harvest personal information. In some cases, it likely tricks people into initiating direct transfers of their crypto holdings to scammers.
Why Is This Scam Working?
The IRS has been sending legitimate educational compliance letters since 2019 to individuals suspected of underreporting digital asset activity. At that time, more than 10,000 taxpayers had received letters from the agency about their crypto transactions.
It hints that receiving IRS mail about cryptocurrency is no longer unusual, which is exactly what scammers are counting on. The agency has increased its scrutiny of digital asset reporting, making the compliance portal feel entirely plausible to someone who is not aware of the fake scheme.
The IRS has been direct about this: it does not send QR codes in official correspondence. If a letter claiming to be from the IRS contains a QR code, that’s the signal to stop before doing anything else.
In addition, the agency also does not ask taxpayers to transfer digital assets as part of any compliance process, and it does not operate any digital asset enrollment portal. Any legitimate IRS notice can be verified through IRS.gov or by calling the number listed on that site.
What To Do If You Receive One?
It is advised not to scan the QR code on the letter, and not to call any number listed in the letter. Do not enter personal information on any site reached through a link or QR code in unsolicited mail. Also, directing to use the agency’s own tools to check your account status.
Furthermore, the scams that impersonate regulators erode trust in legitimate IRS communications around crypto compliance, at a time when the agency is actively increasing enforcement.
Crypto Market Highlights
A High Target Is Set for ONDO: Can a Break Above $0.4218 Trigger a Run to $0.70?
