- Hang up. Do not press 1. Do not call the number they recited.
- Do not open the SMS/email link or QR. Do not install a “tax app.”
- Open the browser yourself. Type irs.gov (tax) or ssa.gov (benefits / SSN scare). Confirm .gov.
- If you already paid: number on the back of the card first, then the reporting table below.
- Gift card / Bitcoin / Zelle / wire to a stranger who “is the IRS or SSA” = scam. No exception in IRS public “will never” lists.
- Caller ID can literally say Internal Revenue Service. That is not a badge. A photo of a badge in a text is not employment.
- Type only: irs.gov · ssa.gov · tigta.gov · oig.ssa.gov · reportfraud.ftc.gov
- IRS impersonation: TIGTA 800-366-4484 or the form on tigta.gov. Email the number to phishing@irs.gov (subject: IRS Phone Scam).
- SSA: report at OIG / ssa.gov scam channels — not a callback from the threat.
What this scam actually is
Nobody has to hack the IRS mainframe. Criminals spoof caller ID, clone a voice, buy a lookalike domain, and send a picture of a badge. The script is old because it works: you owe, you will be arrested, your Social Security number is “suspended,” your refund is waiting if you read a code, ICE is on the way unless you buy iTunes cards.
The IRS has said in public tax tips that it will never:
- Call to demand immediate payment with a prepaid debit card, gift card, or wire. A tax bill generally starts as mail.
- Threaten to send local police to arrest you on that call for not paying.
- Demand payment with no chance to question or appeal the amount.
- Call out of the blue about a refund.
Source: IRS — Taxpayers should hang up if tax season scammers come calling. The FCC repeats the same hang-up-then-irs.gov pattern: FCC tax-season phone scams.
Social Security’s Inspector General treats the same family as “Slam the Scam.” SSA does not suspend SSNs by phone. If you ever owe SSA, they mail payment options and appeal rights. They do not demand secrecy, gift cards, crypto, or that you move cash into a “protected account.” Report at oig.ssa.gov.
FTC consumer data still ranks government impersonation among the costliest frauds Americans report. The habit is identical to our FTC piece: leave their channel, type the .gov yourself. Different agency names, same wallet.
Is this guide for your call?
| What showed up | Use this page? | Why / where else |
|---|---|---|
| Call, voicemail, SMS, email: IRS, Treasury, “tax warrant,” arrest, deportation, pay now | Yes | IRS impersonation |
| Call/text: Social Security, “SSN suspended,” benefits cut, move money to a safe account | Yes | SSA impersonation |
| Paper IRS CP notice in the mailbox; you will call a number printed on irs.gov after you type it | Maybe real | Mail-first is how IRS usually starts. Never the number in a threatening text |
| You opened IRS Online Account / ID.me by typing irs.gov yourself | Can be real | Still will never ask for gift cards |
| Site that is not exactly irs.gov / ssa.gov / tigta.gov / oig.ssa.gov | Yes — close it | Lookalike .com, “irs-gov-secure,” punycode |
| FTC, Medicare, sheriff “missed jury duty,” ICE bond by gift card | Same habit, other URL | FTC hang-up check · medicare.gov · 1-800-MEDICARE |
| Full-screen browser: FBI/IRS, call this number, Windows locked | Popup, not Treasury | Fake virus popups |
| Ransom note on the desktop (files renamed) | No — different crime | Ransomware Family Check (identify only, then No More Ransom) |
| Weird payroll or CEO wire email | No — BEC | Email Header Forensic Analyzer |
The two-minute check (do this in order)
- Name the ask. Money, SSN, bank login, Medicare number, gift card, crypto, “safe account,” arrest, deportation, prize, “refund department needs routing.” If any of that is on a surprise call — hang up.
- Leave their channel. Do not argue. Do not press keypad codes (that can mark the line as live). Do not call back the CID. Do not open the link.
- Type the agency. New tab. You type irs.gov or ssa.gov. Look at the lock and the exact host. If it is
irs.gov.secure-login.comorirs-gov.com, you are not at the IRS. - If you still need a human at IRS. Use a number published on the page you typed — individuals often see 800-829-1040 on irs.gov. Do not use the first Google ad.
- Report even at $0. TIGTA + phishing@irs.gov for IRS scripts; OIG for SSA; ReportFraud.ftc.gov for the FTC database that drives the yearly numbers.
Solutions that actually exist (and ones that do not)
1) You hung up in time — you paid nothing
That is the win. Still report the number: it feeds TIGTA and FTC maps. Tell one relative the house rule: no money on a surprise tax or Social Security call, even if the voice sounds like a relative (AI voice clones exist; the payment rule does not change).
2) You read a gift-card PIN or sent crypto
Call the card brand with the number on the card or receipt, not a number from search ads. Say the PIN was disclosed in a government-imposter scam. Unused balance can sometimes be frozen. Spoken PINs and completed crypto transfers are often gone. Report anyway — TIGTA / OIG / ReportFraud — because patterns matter even when the dollars do not come back. This site will not pretend otherwise.
3) You gave a card number or bank login
Number on the back of the plastic: unauthorized / scam. Change the bank password from a device you trust. If the inbox was involved, run the 15-minute mailbox audit (forwarding rules, app passwords). Then IdentityTheft.gov if SSN or tax identity is in play.
4) You gave a Social Security number
IdentityTheft.gov recovery plan. Free credit freeze at Equifax, Experian, and TransUnion (USA.gov documents the freeze — type usa.gov, do not take the ad). IRS tax-related identity theft: follow IRS identity-protection steps on irs.gov (IP PIN if they offer it — only via the site you typed). SSA: my Social Security only via ssa.gov you typed.
5) A “private collector” says they work for IRS
Real IRS collection still does not take gift cards or Bitcoin on a cold call. Verify only against a notice you already received in the mail and numbers on irs.gov. Hang up on inbound threat calls.
6) What will not save you
- Paying a “release fee” so the same crew “returns” the money.
- A YouTube “IRS unlock tool.”
- A random site that wants you to upload ID “for the Treasury.”
- Arguing with the robocall until they admit it.
Where to report (copy this table)
| They claimed | Real agency will not | You type / call (you looked it up) |
|---|---|---|
| IRS / Treasury / “tax police” | Gift cards, crypto, wire on a surprise call; instant arrest; bill that exists only on the phone | irs.gov · 800-829-1040 · tigta.gov · 800-366-4484 · phishing@irs.gov |
| Social Security | Suspend SSN by phone; secrecy; gift cards; “protected account” | ssa.gov · oig.ssa.gov |
| Any government imposter (also file here) | — | ReportFraud.ftc.gov |
| SSN / tax identity theft | — | IdentityTheft.gov · IRS identity-protection pages on irs.gov |
| FTC / Medicare script | Same payment rule | FTC hang-up guide · medicare.gov |
More IRS consumer alerts: Tax scams and consumer alerts. Fake IRS mail/sites: report fake IRS messages.
Lookalike sites — do not visit “to check”
If the address is not exactly what you typed — irs.gov or ssa.gov — close it. Forward the URL to phishing@irs.gov. We are not publishing a directory of live criminal hosts for you to click. The test is always .gov you typed, same as the 19 fake FTC sites in the FTC takedown guide.
ACSNETWORLD tools that fit this incident
- Pro Tools hub — lab pages, not magic refunds.
- Email Header Forensic Analyzer — if the “IRS” message is in Gmail/Outlook and you can paste the original header (in-browser, no upload).
- Ransomware Family Check — only if files on disk were renamed. Identification + No More Ransom. We do not decrypt here.
Takeaways
- Hang up. Type irs.gov or ssa.gov.
- Gift cards and crypto are not how IRS or SSA collects.
- Mail-first for IRS bills. Phone-first fear is the tell.
- TIGTA + OIG + ReportFraud the same day — even at $0.
- This page does not get Bitcoin back. Speed still matters for card charges.
FAQ
They had my name, last four, and an old address. Data brokers leak. Knowledge is not an IRS appointment.
Robocall: press 1 or local police are dispatched. Hang up. Do not press. Report the number to TIGTA and phishing@irs.gov.
They texted a photo of an IRS or SSA badge. A JPEG is not employment. Hang up. Type the .gov.
I already have an IRS Online Account. Open it only by typing irs.gov. Never from the SMS.
Is this the same as the FTC article? Same habit, different seals. Keep both URLs. FTC page: consumer-protection / fake ftc.gov. This page: tax and Social Security.
Will ACSNETWORLD call the IRS for me? No. We do not take victim files or power of attorney. Official reporting links only.
Sources (official first)
- IRS — Hang up if tax season scammers call
- IRS — Tax scams consumer alerts
- IRS — Report fake IRS messages
- IRS — Identity protection tips
- TIGTA
- FCC — Tax season phone scams
- SSA OIG
- ReportFraud.ftc.gov
- IdentityTheft.gov
- ACSNETWORLD — Fake FTC hang-up check
Changelog. November 2, 2026 — Expanded: recovery solutions, reporting table, internal tools, IRS/SSA/TIGTA/FCC/FTC sources, Blogger hero with alt text, no year in the title.
Get US tech fixes weekly
No spam. Unsubscribe anytime. Tested on Windows 11 24H2.
Comments
Comments
Post a Comment