As cryptocurrency continues to gain mainstream adoption, scammers are finding new ways to target digital asset investors. The Internal Revenue Service (IRS) recently issued a warning about a sophisticated phishing campaign involving fraudulent letters that appear to come from the IRS and direct taxpayers to a fake “Digital Asset Compliance Portal.”
How the Scam Works
Victims receive what appears to be an official IRS letter stating that they must enroll in a “Digital Asset Compliance Portal” before a specified deadline. The letter includes a QR code that directs recipients to a fraudulent website designed to closely resemble IRS.gov.
Once on the fake website, individuals may be asked to provide sensitive information, including:
- Personal identifying information
- Cryptocurrency wallet details
- Exchange account usernames and passwords
- Other financial credentials
The IRS has made it clear that it does not operate a Digital Asset Compliance Portal, and any communication claiming otherwise is fraudulent.
What Should You Do?
If you receive a letter requesting that you scan a QR code or provide cryptocurrency account information:
- Do not scan the QR code.
- Do not provide any personal or financial information.
- Visit IRS.gov directly by typing the website into your browser rather than using links or QR codes from unsolicited correspondence.
- If you’re uncertain about the legitimacy of a notice, contact the IRS using official contact information available on IRS.gov.
If You Already Responded
If you believe you’ve interacted with the fraudulent website or shared sensitive information, take action immediately:
- Stop all communication with the scammer.
- Change passwords for any affected financial or cryptocurrency accounts.
- Notify your cryptocurrency exchange or financial institution as soon as possible.
- Save copies of emails, letters, screenshots, and any other communications.
- Report the incident to IRS Criminal Investigation through the agency’s online fraud reporting process.
A Reminder About QR Codes
While the IRS does use QR codes on certain legitimate notices, including some recent correspondence, taxpayers should exercise caution when receiving unexpected letters, emails, or text messages requesting immediate action. When in doubt, navigate directly to the IRS website rather than scanning a code from an unsolicited communication.
How BHCB Can Help
Tax-related scams continue to evolve, and cryptocurrency investors are increasingly becoming targets. If you receive suspicious tax-related correspondence or have questions about legitimate IRS communications involving digital assets, the professionals at Beers, Hamerman, Cohen & Burger, P.C. can help you determine whether a notice is authentic and guide you on the appropriate next steps.
Have questions about cryptocurrency taxation or IRS correspondence? Contact the BHCB team today. We’re here to help you protect both your financial information and your digital assets.