Fake IRS Texts Are Back — Here’s How to Spot the Scam

IRS Stimulus Scam

If you woke up this morning to a text from the IRS promising you a $1,400 stimulus check, you might want to take a second look. Because, spoiler alert: it’s not from the IRS.

It’s from a scammer who wants your personal information.

Yes, IRS scams are nothing new. Tax season is like the Super Bowl for fraudsters—they know people are on edge about taxes, refunds, and missing stimulus checks. But this latest variation is particularly insidious because it exploits a legitimate IRS program that recently started sending out payments to people who forgot to claim the Recovery Rebate Credit. The scammers’ pitch sounds plausible enough:

“You are eligible to receive a $1,400 Economic Impact Payment. Please provide your accurate personal information. We will deposit the amount into your bank account or mail a paper check within 1 to 2 business days.”

It’s official-sounding, urgent, and, most importantly, entirely fake.

How the Scam Works

This is a textbook phishing scam. The fraudsters mass-blast text messages to as many phone numbers as possible, hoping that at least a few people will take the bait. If you respond and provide your information—things like your Social Security number, bank details, or address—you’ve just handed over everything they need to commit identity theft.

And it’s not just about the $1,400. Once scammers have your data, they can:

  • File fraudulent tax returns in your name and steal your refund.
  • Drain your bank account or open new credit lines under your identity.
  • Sell your information to other criminals on the dark web.

Truman Kain, a cybersecurity researcher at Huntress, sums it up: “These attackers blast text messages to as many phone numbers as they can. It’s totally a numbers game. They’re blasting them out, hoping that someone clicks. I’m telling you, you do not want to be one of those people.”

Breaking Down the Red Flags

IRS Stimulus Scam

This scam has several glaring red flags that should immediately set off alarm bells. Let’s break them down:

1. The IRS does not send texts or emails about stimulus payments.

The biggest giveaway is that the IRS does not initiate contact via text or email regarding payments, refunds, or personal information requests. If the IRS needs to contact you, it will do so by mail.

2. The URL is fake.

The message includes a suspicious-looking link:

https://www.irs.gov.tax-mond.com

At first glance, it looks like an official IRS site, but look closer—it’s not.

  • The real IRS website always ends in .gov (irs.gov)—not .com, .net, or anything else.
  • “tax-mond.com” is not an official government domain. It’s likely a phishing site designed to steal your information.

3. The wording is off.

Government agencies, especially the IRS, use formal and precise language in their communications. This text sounds vaguely official but includes awkward phrasing:

  • “Please provide your accurate personal information.” The IRS would never ask you to confirm “accurate personal information” via text.
  • “Click the link, or copy it into your Safari browser.” Why specify Safari? Legitimate institutions don’t instruct you to manually copy and paste links—only scammers do that when they’re trying to evade detection.

4. A sense of urgency.

Scammers want you to act fast and think later. This message pressures you to claim your payment within “1 to 2 business days.” The real IRS does not impose short, arbitrary deadlines via text.

5. The request for personal information.

The IRS never asks for sensitive personal details—such as your Social Security number, banking information, or passwords—through text messages, emails, or unsolicited phone calls.

6. The sender’s email looks suspicious.

The scam message comes from an email address (tuxiantuo.renliangwei_1980.zhimenri@hot…). This has nothing to do with the IRS. Official IRS communications would come from @irs.gov—not a random personal-looking email.

7. The odd request to reply with “Y.”

The message asks you to reply with “Y”, exit the text message, then reopen it. This is an unusual and completely unnecessary action, designed to manipulate you into clicking the fraudulent link without thinking.

Why This Scam Is So Effective

One of the most dangerous aspects of this scam is that it preys on a real government program. The IRS recently announced that over one million Americans who didn’t claim their Recovery Rebate Credit in 2021 are now receiving automatic payments. That means if you saw a text about a missing $1,400 check, you might assume it’s legit.

But the key word here is automatic.

If you’re eligible, the IRS will send the payment without you needing to do anything. No forms. No phone calls. No texts.

IRS Commissioner Danny Werfel even clarified this in a public statement: “To minimize headaches and get this money to eligible taxpayers, we’re making these payments automatic.”

Bottom Line

This scam isn’t particularly innovative, but it’s effective because it rides on the coattails of a real IRS program. It’s a reminder that in the digital age, the biggest risk to your personal security isn’t a sophisticated cyberattack—it’s human psychology. Scammers rely on urgency, fear, and trust to trick people into handing over their information.

So if a text message promises you free money from the government, take a step back and think: Would the IRS really contact me like this?

Because the answer is almost always no.

Sign up for our newsletter to get the latest scam alerts, practical security tips, real-life scam examples, and expert advice to keep you one step ahead of online threats.

Please enable JavaScript in your browser to complete this form.


Comments

Leave a Reply

Your email address will not be published. Required fields are marked *

Skip to content