IRS Fraud Alert: Fake Letters Target Crypto Holders in Data-Stealing Scam

Share:
The IRS Criminal Investigation unit warns that scammers are mailing official-looking letters to crypto holders that direct recipients to a fake Digital Asset Compliance Portal and embed QR codes that lead to spoofed sites designed to harvest personal data or trick users into transferring digital assets. The alert notes that since 2019 more than 10,000 taxpayers have received legitimate IRS crypto compliance letters, which scammers exploit; the IRS says it never uses QR codes or asks for asset transfers and urges verification via IRS.gov, highlighting rising security and compliance risks for crypto adoption.
- The IRS has warned that scammers are sending fake official letters targeting crypto holders to steal their digital assets and personal data.
- The fraudulent letters instruct recipients to sign up for a fake portal, which the agency confirms does not exist.
The IRS Criminal Investigation unit has issued a warning to cryptocurrency holders about a sophisticated phishing scheme. It uses official-looking paper letters to steal personal data and digital assets. The scam is built around a fake Digital Asset Compliance Portal, a portal the IRS confirms does not exist.
Crypto holders receive a letter that appears to be from the IRS, complete with official formatting and a deadline. Moreover, the letter instructs recipients to enrol in the non-existent Digital Asset Compliance Portal before that deadline.
Inside the letter is a QR code; scanning it takes the recipient to a spoofed IRS website designed to harvest personal information. In some cases, it likely tricks people into initiating direct transfers of their crypto holdings to scammers.
Why Is This Scam Working?
The IRS has been sending legitimate educational compliance letters since 2019 to individuals suspected of underreporting digital asset activity. At that time, more than 10,000 taxpayers had received letters from the agency about their crypto transactions.
It hints that receiving IRS mail about cryptocurrency is no longer unusual, which is exactly what scammers are counting on. The agency has increased its scrutiny of digital asset reporting, making the compliance portal feel entirely plausible to someone who is not aware of the fake scheme.
The IRS has been direct about this: it does not send QR codes in official correspondence. If a letter claiming to be from the IRS contains a QR code, that’s the signal to stop before doing anything else.
In addition, the agency also does not ask taxpayers to transfer digital assets as part of any compliance process, and it does not operate any digital asset enrollment portal. Any legitimate IRS notice can be verified through IRS.gov or by calling the number listed on that site.
What To Do If You Receive One?
It is advised not to scan the QR code on the letter, and not to call any number listed in the letter. Do not enter personal information on any site reached through a link or QR code in unsolicited mail. Also, directing to use the agency’s own tools to check your account status.
Furthermore, the scams that impersonate regulators erode trust in legitimate IRS communications around crypto compliance, at a time when the agency is actively increasing enforcement.
Crypto Market Highlights
A High Target Is Set for ONDO: Can a Break Above $0.4218 Trigger a Run to $0.70?
Read More





