AI Scammers Hijack Tax Refunds — Are You Next?

Red stamp with the words SCAM ALERT in bold letters — AI SCAMMERS STEAL TAX REFUNDS

Tax-season criminals are now using AI voices, fake IRS accounts, and social-media impersonation to hijack refunds before many Americans even realize their identity has been stolen.

Story Snapshot

The IRS’s 2026 “Dirty Dozen” warning highlights identity-theft scams that spike during filing season, especially via phishing texts, emails, and impersonation.
Officials say scammers increasingly use AI-enhanced robocalls and spoofed caller IDs to sound legitimate and pressure quick action.
The IRS reports finding more than 600 social-media impersonators in fiscal year 2025, showing how much fraud has moved onto platforms people use daily.
Victims often discover the crime only when a legitimate return is rejected or the IRS flags suspicious activity, triggering long delays and paperwork.

IRS “Dirty Dozen” 2026: Identity Theft Goes High-Tech

The IRS used National “Slam the Scam” Day on March 5, 2026, to release its annual “Dirty Dozen” list and put identity theft near the center of its tax-season warnings.

The agency described a fast-evolving playbook: criminals steal personal data, file fraudulent returns for refunds, or take over online IRS accounts. The warning emphasized that these schemes often begin with phishing emails, smishing texts, or impersonation attempts that appear official.

Identity theft can cost you during tax season: It's 'a terrible reverse lottery,' one victim says https://t.co/cr9pF1YDpQ

— CNBC (@CNBC) March 10, 2026

IRS guidance also stresses a basic rule many Americans still don’t hear clearly enough: scammers try to create urgency. Fraudsters push targets to “verify” information, click links, or disclose Social Security numbers and account credentials.

The IRS says taxpayers should contact the IRS through official channels, not respond to unexpected messages. For older Americans and busy families—already juggling inflation-era budgets and paperwork—this kind of pressure campaign can turn tax filing into that “reverse lottery” where a random victim pays.

How Social-Media Impersonation Became a Pipeline to Refund Fraud

Federal officials point to a clear trend: identity theft is no longer confined to sketchy emails. The IRS reports it identified more than 600 social-media impersonators in fiscal year 2025, signaling organized efforts to mimic government agencies and tax professionals online.

Once criminals harvest names, dates of birth, or partial Social Security numbers, they can attempt account takeovers or file early fraudulent returns. Tax pros and businesses also remain targets because stolen W-2 data can enable large-scale fraud.

Record breach activity adds fuel. Reporting cited in consumer-privacy research points to 3,322 data breaches in 2025, a volume that increases the odds that a taxpayer’s information is already circulating.

That reality matters because the victim may do everything “right” this year and still get hit, then spend months proving to the IRS they are who they say they are. Sources also note many breach notifications lack useful detail, leaving families unsure which accounts to lock down first.

Why Seniors, High-Net-Worth Filers, and Non-Filers Face Elevated Risk

Multiple tax-season advisories identify seniors as frequent targets because scammers assume they may be more likely to answer calls or trust authoritative-sounding scripts.

High-net-worth households can be attractive targets due to larger expected refunds, more complex filings, and broader “digital footprints” tied to investments.

Advisers also warn that non-filers—including families handling the affairs of deceased relatives—can be vulnerable because criminals may attempt to exploit identities that are less likely to be actively monitored.

The emerging crypto reporting environment is another complication. Advisories highlight that new forms and changing rules can become bait for criminals offering “help” or pushing fake compliance messages.

The IRS and industry groups emphasize that complexity is the scammer’s friend: the more confusing the process feels, the easier it is to lure someone into clicking a link or handing over sensitive information.

For taxpayers who value limited government, the bitter irony is clear: the bigger and more complex the system gets, the more surface area criminals can exploit.

What Happens to Victims—and the Practical Steps That Actually Help

Identity-theft victims often learn the truth in the most aggravating way possible: a rejected e-filed return, an IRS notice about a return they didn’t file, or a sudden delay in a refund they were counting on.

Guidance for recovery commonly includes submitting the IRS identity theft affidavit (Form 14039) and following IRS instructions to secure accounts. Some professional advisories also recommend using IRS identity protection tools and filing as early as possible to beat criminals to the punch.

IRS and industry guidance converge on a few habits that reduce risk without turning taxpayers into full-time cybersecurity staff: avoid links in unexpected IRS-themed texts or emails, navigate to official IRS webpages independently, and treat phone calls claiming immediate enforcement action as suspicious.

Sources also highlight reporting options, including IRS tip tools and resources for identity-theft victims. The bottom line for families is straightforward: verify first, act second—because once a thief files using your identity, getting your refund and your records corrected can become a slow, paper-heavy fight.