Dirty Dozen Tax Scams for 2026: What to Watch For and What to Do If You Get a Suspicious Message
Tax season is when scammers work overtime.
The IRS just released its annual “Dirty Dozen” list for 2026 to warn taxpayers, businesses, and tax professionals about the most common and most dangerous tax scams they are seeing right now. The biggest theme this year is that scams are getting more convincing, especially with AI-powered phone impersonation and realistic-looking texts that include QR codes. You can read the IRS release directly in the IRS newsroom article on the Dirty Dozen tax scams for 2026.
This post is not just a recap of the IRS list. We are going to translate it into practical, real-life guidance, including the simple “pause and verify” steps we recommend to clients when a scary text or call hits their phone.
If you already received something suspicious, or you are worried your tax information may have been compromised, you can contact us through White Sands Tax Services and we can help you figure out the next best step.
The most important rule to remember
Scams work because they create urgency.
Before you do anything, run this 10-second checklist:
Is this message unexpected?
Is it pressuring you to act immediately?
Does it ask you to click a link, scan a QR code, share a code, or confirm personal data?
If the answer is yes to any of those, stop. Do not click. Do not scan. Do not reply.
The IRS also reminds taxpayers that it generally contacts people by mail first, and it does not make threatening calls demanding immediate payment or threatening arrest.
The 2026 Dirty Dozen list, translated into plain English
Here are the 12 scams the IRS is highlighting for 2026, plus what they look like in real life.
1) IRS impersonation by email and text (phishing and smishing)
What it looks like: a text or email that appears official, often with alarming language and a link or QR code telling you to “verify your account,” “claim your refund,” or “fix a problem.”
Our practical tip: treat any unexpected IRS text as suspicious. If you want to verify something, type IRS.gov into your browser yourself, do not click links.
2) AI-enabled IRS phone impersonation
What it looks like: a call that sounds professional, may have spoofed caller ID, and may use AI voice tactics to sound realistic. It can be framed as “urgent compliance” or “final notice.”
Our practical tip: hang up. If it is real IRS contact, you will have a mailed notice trail.
3) Fake charities
What it looks like: donation requests that spike after disasters, tragedies, or viral events. Some scammers use fake charity names that sound very similar to legitimate nonprofits.
Our practical tip: never give personal data to “confirm” a donation, and do not donate through a random link in a social post. Verify before you give.
4) Misleading tax advice on social media
What it looks like: “tax hacks” promising huge refunds or “secret credits” that are not real, or are being misused.
Our practical tip: if the “hack” seems too good to be true, assume it is either wrong or abusive. The IRS is clear that knowingly filing false information can lead to penalties and worse.
5) Identity theft involving IRS Online Account access
What it looks like: someone pretending to “help you” set up your IRS account or requesting login codes to “verify” your identity.
Our practical tip: only create or access your IRS account directly through IRS.gov. Do not share verification codes with anyone, including someone claiming to be IRS support.
6) Abusive undistributed long-term capital gains claims (Form 2439)
What it looks like: schemes encouraging people to claim a refundable credit tied to Form 2439 using fabricated or inflated information.
Our practical tip: if you did not receive a legitimate Form 2439 from an investment fund or REIT, this is a red flag. This item is newer to the Dirty Dozen list and is one reason refunds can get delayed while the IRS verifies claims.
7) Bogus “Self-Employment Tax Credit” promotions
What it looks like: ads or posts telling self-employed people they qualify for a broad self-employment credit that generates a large refund.
Our practical tip: be careful with anyone selling a one-size-fits-all “credit” for gig workers. Many of these promotions push people into filing inaccurate returns.
8) Ghost preparers
What it looks like: a preparer who will not sign the return, will not include a PTIN, or pushes you to file quickly without explaining what they did.
Our practical tip: if they will not sign, walk away. You are legally responsible for what gets filed under your name.
9) Non-cash charitable contribution schemes
What it looks like: inflated valuations for donated property, art, or conservation-related transactions with promises to wipe out taxes.
Our practical tip: if someone is pitching a donation strategy mainly as a tax elimination tool, ask for independent verification and be cautious.
10) Overstated withholding schemes (fake wage and withholding data)
What it looks like: instructions to “increase your refund” by making up withholding numbers, sometimes called “other withholding.”
Our practical tip: withholding is something the IRS can match to third-party records. Made-up withholding is an audit and penalty magnet.
11) Spear-phishing and malware targeting tax professionals
What it looks like: fake “new client” emails, document requests, or links that install malware, often designed to steal taxpayer data or compromise a firm’s systems.
Our practical tip: use secure client portals and do not email sensitive documents as attachments. This is one reason our onboarding is built around secure uploads through our new client process.
12) Aggressive or misleading Offer in Compromise marketing (OIC mills)
What it looks like: ads promising you can “settle tax debt for pennies” without first checking whether you qualify.
Our practical tip: the Offer in Compromise program can help some taxpayers, but it is not a guaranteed shortcut. Be cautious of high-pressure sales tactics and big upfront fees.
What we are actually seeing right now
Here are the patterns that show up most often when someone contacts us worried about a scam:
A text with a QR code claiming a refund issue or an “account hold”
A call that uses urgent language like “final notice,” “immediate enforcement,” or “you will be arrested”
A social post telling people to claim a credit they have never heard of, with a screenshot of a huge refund
A “friend of a friend” offering to file taxes cheaply, but refusing to sign the return or explain the numbers
A request for identity verification codes that sounds routine, but is actually an account takeover attempt
Scammers are counting on one thing: that you react quickly.
If you get a suspicious IRS-related email, text, or social message
Here is a simple response plan that works:
Do not click links or scan QR codes.
Take a screenshot for your records.
Report it using the IRS reporting instructions on the Report fake IRS, Treasury or tax-related emails and messages page.
Delete it and move on.
That IRS reporting page also explains what to do if your money or identity was stolen.
If you already clicked a link or shared information
Take action quickly, but calmly:
Stop communicating with the sender.
Change passwords on your email account first. Your email is often the key to resetting everything else.
If you shared banking info, contact your bank immediately and ask about protective steps.
If you suspect tax-related identity theft, use the IRS guidance on Identity Theft Central to take the right steps.
If you received an IRS notice and you are not sure whether it is legitimate, do not ignore it and do not panic. You can upload it securely through our new client process so we can review it with you.
How to protect yourself before scams hit
A few proactive moves reduce risk significantly:
Use a secure method to share tax documents
Avoid sending Social Security numbers, W-2s, and full tax returns through email attachments. Secure portals are safer and reduce exposure if an email account is compromised.
Be skeptical of “refund math” on social media
If someone promises a refund amount before reviewing real documents, that is a warning sign. A legitimate preparer will ask for records and will explain what is being claimed and why.
Create a “tax season verification habit”
Any time you get an unexpected message, do not respond from the message itself. Instead:
type the official website address yourself
use a known phone number from a real notice or the official website
do not use numbers or links provided in the suspicious message
This one habit prevents a huge portion of scam losses.
Need help, or want a second set of eyes?
If something feels off, trust that instinct. A quick review now can prevent a bigger mess later, especially if a scammer files under your name or if a questionable credit gets claimed.
If you want support, you can review our services or schedule a consultation and we will help you understand what is happening and what to do next.
Disclaimer
This article is for general informational purposes and does not constitute tax, legal, or cybersecurity advice. Scams evolve quickly, and the right next step depends on what information was shared and what communications you received.
