A profile picture built around the agency’s own eagle seal, a fabricated case number, and a link promising a stalled refund: that is the anatomy of the fake account the Internal Revenue Service says it has been tracking by the hundreds. In its newest annual scam list, the agency counted more than 600 social media accounts built specifically to impersonate it during fiscal year 2025. The figure matters to any household that banks, files taxes, or reads financial news online, because an impersonator account does not require a search; it only needs a comment thread, a direct message, or a sponsored post to reach someone who assumes an official-looking seal means the message is real. The count comes from the agency’s own reporting record, not from a private security vendor or a news outlet’s tally.
Where the 600-Plus Figure Comes From
The number sits inside the IRS’s 2026 “Dirty Dozen” list, published as IR-2026-30 on March 5, 2026, and timed to coincide with National Slam the Scam Day. The list is compiled through the Security Summit, a standing partnership among the IRS, state tax agencies, and the tax preparation industry, and it is refreshed once a year rather than issued as breaking news. The impersonator count sits under the list’s first entry, titled “IRS impersonation by email and text (phishing and smishing),” where the agency states plainly that it reported over 600 social media impersonators during fiscal year 2025.
The mechanism behind those accounts follows a repeatable pattern. Scammers send emails, direct messages, and texts that appear to come from the agency, often paired with alarming language and QR codes that route a reader to a fake IRS website designed to harvest login credentials, Social Security numbers, or bank details under the guise of “verifying” an account or claiming a refund. The agency’s own warning is blunt about the downside of clicking: a booby-trapped link can quietly install malware, including ransomware, that locks a device or its files without the account holder noticing until it is too late.
Free download: The first-hour steps in order, who to call at banks, agencies and credit bureaus, and what to document. Get the free scam and identity-theft action card.
Free download from RetireShield. Getting it also signs you up for the free Retirement Money Brief, a weekday email. Unsubscribe anytime.
The Phone Version Now Runs on AI Voices and Spoofed Caller ID
The social media accounts are not the only impersonation channel on the 2026 list. The second entry covers phone-based impersonation, where callers use computer-generated tactics and spoofed caller ID to make a robocall look like it is coming from a legitimate government line. Some of these calls now rely on voice mimicry rather than a scripted recording, which is why the agency also warns taxpayers against trusting AI-generated answers to tax questions without checking the underlying math or rule against an official source.
The overlap between the phone scam and the social media scam is deliberate on the criminals’ side. A fake account can screenshot a real IRS notice, repost it with a phone number attached, and drive traffic from the comment thread straight into a spoofed call. Treating the two as separate problems, one a webpage and one a phone number, undercounts how coordinated a single impersonation campaign against one household can be.
How the Real Agency Actually Makes First Contact
The single fact the IRS repeats most often in this release is the one most useful for telling a real notice from a fake one. The agency states that it generally contacts taxpayers by mail first, and that it does not leave urgent, threatening prerecorded voicemails, call to demand immediate payment, or threaten arrest over the phone. Any message that skips the mailed notice and jumps straight to a demand for instant payment, a gift card, or a wire transfer is, by the agency’s own description of its process, already inconsistent with how it operates.
That rule does not mean every phone call from a number claiming to be the IRS is automatically fake, since the agency does make outbound calls in specific circumstances after mail contact has already occurred. What it does mean is that urgency paired with a first contact by phone, text, or direct message is the combination the agency is asking people to treat with suspicion.
Social Media “Tax Hacks” Are a Separate Entry on the Same List
Impersonator accounts are not the only social media risk named in the 2026 Dirty Dozen. A separate entry on the same list addresses viral “tax hacks,” where misleading posts encourage people to file returns with false information or claim credits they do not actually qualify for. The agency warns that following this kind of advice can lead to refund delays, audits, penalties, or worse, and it points taxpayers back toward the IRS itself, a qualified tax professional, or other vetted sources rather than a trending video. Coming from the same list as the impersonator-account entry, the pairing underlines a single theme running through the 2026 release: platforms built for engagement, not verification, are where both fake accounts and fake advice now originate.
Reporting a Suspected Fake Account or Message
The IRS lays out a specific reporting path in the same release rather than leaving it to a general fraud hotline. Suspicious IRS-related emails, direct messages, and texts can be forwarded to [email protected], and the agency has also stood up an online tool at IRS.gov/SubmitATip that consolidates fraud-reporting options into a single intake point routed to the appropriate office. For a suspicious phone call, the agency’s guidance is simply to hang up rather than engage, and anyone whose tax identity may already be compromised is directed to IRS.gov/idtheft for account-recovery steps.
Those channels only work if the report reaches the agency before, not after, someone acts on a fake message. The release itself makes that ordering explicit: prompt reporting is what allows the agency to stop an abusive account or number before its next round of targets, rather than simply logging the damage after the fact.
When an Impersonator Message Arrives Before Anyone Has a Plan
The IRS’s own count of impersonator accounts shows how many fake messages are built to look exactly like a real agency notice, and its mail-first rule only helps if someone remembers it in the moment a call or text creates pressure to act. Most households have no fixed way to slow that moment down or to tell a family member’s real voice from a spoofed one. That gap between knowing the warning signs and having a written plan for the first hour after contact is where a scam usually succeeds or fails.
The Senior Fraud Defense & First-Hour Recovery Kit lays out a first-hour recovery plan and a family code word for verifying unexpected calls, along with free credit-freeze steps and a fraud evidence and report log for tracking exactly what happened and when.
See the full first-hour plan and code-word method in The Senior Fraud Defense & First-Hour Recovery Kit.
AI-assisted research and drafting; reviewed by an editor.
