Significant Increase in IRS-themed Smishing Campaigns

Beginning in the Fall of 2020, IRS's Online Fraud Detection & Prevention (OFDP), which monitors phishing@irs.gov, observed an increase in reports of SMS/text phishing ("smishing") requesting taxpayer personal and financial information. These smishing campaigns continued through the pandemic. In recent months and weeks, IRS-themed smishing has increased exponentially. The FBI Internet Crime Complaint Center (IC3) in collaboration with the Treasury Inspector General for Tax Administration (TIGTA) warn the public of ongoing smishing campaigns.

Below is a recent example of smishing messages reported to the IRS.

IRS.gov You have received tax relief in disaster situations Status Amount of $303,40 is available to claim. IR-2022-156, Saturday 17 September. September is National Preparedness Month: IRS urges everyone to update and secure their records to prepare now for natural disasters. Submit Application & Complete Registration From here. hxxp://lubinaf[.]me/?irs-deducted-taxes-record=[REMOVED]

Reports indicate large-scale smishing campaigns that have delivered hundreds, thousands, or even hundreds of thousands of IRS-themed SMS/text messages in hours or a few days. The public should be aware scammers will continually change tactics and language to evade detection.

How to Report IRS-related Smishing

The public is advised to file this type of activity with the IRS, TIGTA, and the IC3. Please be sure to include the phrase "IRS SMS SCAM" within the complaint.

To send SMS/text scams to the IRS:

  • Create a new email to phishing@irs.gov
  • Copy the Caller ID number (or the email address)
  • Paste the number (or email address) into the email
  • Press and hold the SMS/text message and select Copy
  • Paste the copied text message into the email
  • If possible, include the exact date, time, time zone, and the telephone number that received the message
  • Send the email to phishing@irs.gov

Screenshots can still be sent in email but the actual text is preferred. phishing@irs.gov only processes IRS, Treasury, and/or tax-related online scams. Smishing involving other agencies and/or brands should not be reported to phishing@irs.gov, but to the appropriate agency and/or brand being impersonated.

To file with IC3:

  • Go to www.ic3.gov, and click on "File a Complaint".
  • Copy and paste the fraudulent message within the complaint description field. Include if the link was clicked or not and any other information relevant to the SMS/text scam.
  • Be sure to include the phone number (or email address) that sent the SMS/text scam in addition to the exact date, time, time zone, and the that received the text message.

Reminders

Additional Information