Tax scams are getting sneakier – 10 ways to protect yourself before it's too late

It’s tax season again. And that means it’s time not only to file your taxes, but also to watch out for scammers looking to con tax-paying citizens. In a new report out today, McAfee highlights the most popular tax-related scams and offers advice on how to protect yourself against them.

Also: 5 ways AI can help you do your taxes – and 10 tax tasks you shouldn’t trust it with

Based on a new 2025 tax season survey conducted by McAfee, about 48% of people revealed that they, or someone they know, were contacted by a person claiming to be from the IRS or a state tax agency. The scammers used a variety of methods to target potential victims, including social media posts, emails, text messages, and phone calls.

People ages 18 to 24 reported the highest number of successful scams, with 40% of them saying that they, or someone they know, had been scammed. But older adults ages 65 to 74 suffered the greatest financial losses. Among the people in that group who lost money in a tax-related scam, 40% said they were out between $751 and $1,000. The highest losses were found among those in the 45 to 54 age range, with 10% reporting that they had lost more than $10,000.

Today’s cybercriminals also know how to use the latest sophisticated techniques. With deepfake audios, scammers can sound like actual IRS agents. And with AI-generated phishing emails, they can duplicate actual messages from legitimate tax preparation services.

Also: What is vishing? Voice phishing is surging – expert tips on how to spot it and stop it

More than half of the people surveyed said they think that tax-related scam attempts have become more realistic, with most of them worried that AI is making the scams more difficult to detect.

How tax scams work

In its report, McAfee illustrated how one type of tax scam might work.

You receive an urgent text or email claiming that your refund was rejected or that you owe back taxes. Looking like a real notice you might get from the IRS, the message typically includes a link for you to click or a phone number for you to call. If you take the bait, the scammer will often tell you that they need your Social Security number, bank account details, or credit card information to help you. Give them what they want, and now the criminals have easy access to your money or your identity.

Also: Got a suspicious E-ZPass text? It’s a trap – how to spot the scam

Based on the survey results, scammers like to try different variations on a familiar theme:

• Fake IRS messages – Almost half of those polled by McAfee have received messages from someone posing as an IRS official.
• Impersonating tax services – One-third of the respondents said that they, or someone they know, was targeted by scammers pretending to be from TurboTax, H&R Block, or another tax provider.
• Baiting victims with fake refunds – More than a third of those surveyed said they’ve gotten suspicious messages that promised tax refunds and included malicious links.
• Cryptocurrency scams – Based on the survey, men are three times more likely than women to be hit by phony cryptocurrency tax payment schemes.

How to protect yourself from tax scams

To protect yourself from tax-related scams, McAfee offers the following 10 tips:

1. File early before cybercriminals swoop in

The sooner you file your taxes, the less time scammers have to falsely file taxes in your name.

2. Monitor your credit reports

Review your credit reports to look for any unusual activity, such as unauthorized accounts placed in your name or major changes to your score. Also consider trying security software and services that monitor your personal details on the dark web and alert you if anything suspicious pops up.

3. Watch out for phishing attacks

Phishing is the most popular trick used in tax-related scams. Watch out for emails or texts that request personal or financial details. Always verify the message with the official sender. And remember that the IRS will never contact you by email, text, or social media to request personal information.

4. Beware of spoofed websites

Scammers like to set up phony tax preparation websites that spoof the real ones. Type the address of your actual tax prep site rather than clicking on a link from an email or advertisement. When in doubt, investigate the domain before you enter any confidential information.

5. Defend yourself from scam messages

Be on the alert for any text message that prompts you to click a link for a refund or payment. A good text scam detector can block access to suspicious or malicious sites.

Also: Why rebooting your phone daily is your best defense against zero-click attacks

6. Remove any personal data online

Scammers typically find phone numbers and email addresses from data broker and people-finder sites. With help from a data deletion service, you can try to remove your personal information from such sites.

Also: How to delete your personal info from Google Search – quickly and easily

7. Look into identity theft protection

An identity theft protection service provides personal and financial monitoring and will try to help you if your identity is ever compromised.

8. Ignore messages asking for urgent payment

Any message that claims to be from the IRS seeking payment is a scam. The agency doesn’t contact people by text, email, or social media to request payment.

9. Head directly to a reliable source

If you have any tax-related questions or concerns, go directly to the IRS website or your state tax agency. Never click on a link in an email or other message, as that could take you to a fraudulent copycat site.

10. Consider using AI-enabled security tools

Such programs use the latest AI smarts to try to detect scam calls and texts before you fall victim.