
How to know it’s the IRS (and not a scammer)
Tax scams rise during filing season and whenever tax rules change. Knowing how to know it’s the IRS helps you verify what you received and respond correctly. For full details, see the IRS’s official page: How to know it’s the IRS.
To quickly get to our “Quick checklist: how to know it’s the IRS”, click here.
What real IRS contact looks like
- Mail first. Initial contact typically arrives by U.S. mail. You can search notice numbers on IRS.gov to verify.
- Phone calls. The IRS may call to discuss account matters or direct you to IRS.gov. Automated messages do not include sensitive details.
- Email or text only if you opted in. The IRS may use email or text with your permission. Limited exceptions apply for criminal investigations.
- In-person visits are uncommon. Only certain employees visit, each with official identification. The agency ended most unannounced revenue-officer visits in 2023, which makes surprise knock-and-talks even rarer.
- Private collection agencies. If a private collection agency is assigned, you will first receive IRS letters, including CP40. The IRS and the agency letters include a Taxpayer Authentication Number that both sides use to confirm identity. You can read more here: Private debt collection.
What the IRS will not do
- Ask for payment by gift card or prepaid debit card
- Demand payment through social media messages
- Use threats or scare tactics, or point you to websites that are not IRS.gov
- These are strong signs of a scam. Start with the official guidance here: Report phishing and online scams.
If you get something suspicious
- Do not click links, reply, or open attachments.
- Forward unsolicited emails (with full headers) to phishing@irs.gov.
- Report suspicious texts to 7726 (SPAM), then email details to phishing@irs.gov.
- If money was lost, report to TIGTA, the FTC, or IC3 as the IRS instructs on its page. See Report phishing.
Identification during a visit
IRS personnel carry an IRS credential (pocket commission) and an HSPD-12 smart card with photo and serial number. Criminal Investigation special agents also carry law-enforcement credentials. You can ask to see identification. In certain situations, you can use the IRS-CI Employee Verification Tool referenced on the IRS page above. If you feel unsafe, call 911.
Not sure it is really the IRS? We can help.
If a letter, voicemail, text, or visit does not feel right, send it to us. We will confirm authenticity using current IRS guidance, explain what it means, and handle the next steps for you.
Contact Torkelson & Associates CPAs
Quick checklist: how to know it’s the IRS
- First contact is usually by mail. Verify the notice number on IRS.gov.
- Phone calls may follow, but sensitive details are not in robocalls.
- Email or texts are used only with your permission.
- Private collection agencies contact you only after IRS letters, and both letters include a Taxpayer Authentication Number.
- The IRS ended most unannounced revenue-officer visits in 2023.
- Report phishing to phishing@irs.gov and follow steps on the IRS page.