Don’t Let a QR Code Cost You: How to Avoid the Latest IRS Scam
Scammers are constantly finding new ways to steal personal and financial information, and one of the latest tactics involves something many of us use every day: QR codes.
QR code can seem harmless, especially when it appears on what looks like an official IRS notice. But before you scan, it’s important to know that scammers are using fake IRS letters and fraudulent QR codes to direct taxpayers to websites designed to steal sensitive information.
How the Scam Works
You receive a letter that appears to come from the IRS. It may include official-looking logos, realistic formatting, and even a legitimate IRS phone number or website listed on the notice.
The catch? The QR code.
Instead of taking you to an official IRS webpage, the code may send you to a fake website that asks for personal information such as:
- Social Security numbers
- Bank account information
- IRS account login credentials
- PINs or passwords
Once this information is submitted, scammers can use it to commit identity theft or financial fraud.
Why This Scam Is So Convincing
QR codes have become part of everyday life, making them an easy target for scammers.
A fake IRS notice may appear completely legitimate at first glance. In some cases, even the website address or phone number printed on the letter may be accurate. The fraudulent QR code is often the only part of the notice designed to deceive you.
That’s why it’s important to verify before you scan.
How to Protect Yourself
If you receive an unexpected IRS notice, keep these tips in mind:
● Don’t scan QR codes on unexpected letters or notices.
● Go directly to IRS.gov by typing the address into your web browser.
● Never provide personal or financial information through links received from unsolicited emails, text messages, or social media.
● If you’re unsure whether a notice is legitimate, contact the IRS using information found on IRS.gov, not the information provided by a suspicious message or QR code.
Remember: The IRS Won’t Contact You This Way
The IRS does not initiate contact with taxpayers by email, text message, or social media to request personal or financial information. This includes requests for:
- Passwords
- PIN numbers
- Bank account information
- Credit card information
- Other sensitive financial details
If you receive a message asking for this information, it’s almost certainly a scam.
Stay Informed
Tax scams continue to evolve each year, making awareness one of your best defenses. The IRS publishes its annual Dirty Dozen list to help taxpayers recognize the most common scams targeting individuals and businesses.
Review the 2026 Dirty Dozen Tax Scams to learn more about the latest threats and how to protect yourself.
Staying cautious and taking a few extra moments to verify before clicking or scanning can help protect your identity, your finances, and your peace of mind. When in doubt, skip the QR code and go directly to IRS.gov.
