Phish Files
Abstract Aliens On Flying Saucers Northern Lights Lighthouse Mountains Water Tree Sun Background Gradient Unidentified Flying Object Ufo Stars Vector Design Style Landscape
Phish Files Articles
February 20, 2026

Taxes Are Inevitable. Scams Are Avoidable.

Posted in: News

banner that says breaking news with a fish in a bowl.

Tax season is here, which means it’s time to gather documents, file returns, and stay alert for cybercriminals. Each year, scammers take advantage of the stress and urgency surrounding taxes by impersonating the IRS, tax preparation services, employers, and even universities to steal personal and financial information.

Whether you’re a student filing taxes for the first time, a faculty or staff member managing deductions, or helping a family member prepare their return, understanding tax-related scams can help protect your identity, finances, and university accounts.

Common Tax Season Scams to Watch For

Phishing Emails and Fake Messages

Scammers often send emails or text messages pretending to be from the IRS, tax software companies, or financial institutions. These messages may:

  • Claim there is an issue with your tax return

  • Promise unexpected refunds or stimulus payments

  • Ask you to verify personal or financial information

  • Contain links to fake websites designed to steal your login credentials

IRS Impersonation Calls

Some scammers pose as IRS agents and use threatening or urgent language, claiming you owe money and must pay immediately or face legal action.

They may demand payment through:

  • Gift cards

  • Wire transfers

  • Cryptocurrency

  • Payment apps

Fake Tax Preparation Services

Criminals may create websites or social media advertisements offering fast or low-cost tax filing services. These services may collect your personal information and disappear or use your identity to file fraudulent tax returns.

How the IRS Actually Contacts You

Understanding how the IRS communicates can help you quickly identify scams.

The IRS WILL:

  • Usually contact you first through official letters sent by U.S. mail

  • Provide time to respond or appeal

  • Direct you to verified resources on IRS.gov

The IRS WILL NOT:

  • Contact you through social media, text messages, or email requesting personal information

  • Call demanding immediate payment or threatening arrest

  • Request payment using gift cards, cryptocurrency, or wire transfers

  • Ask for passwords or account login information

If you receive a suspicious message claiming to be from the IRS, it is safest to verify it independently before taking action.

Check Links Carefully

Scammers often create fake websites and forms that look like trusted tax services, banks, or even university login pages. Their goal is to steal usernames, passwords, Social Security numbers, and banking information.

Once attackers have your credentials, they may try to access your accounts and send repeated Duo or multi-factor authentication (MFA) requests hoping you’ll approve one. This tactic is known as MFA fatigue or push bombing.

Watch for Red Flags

  • Unexpected messages with login links

  • Slightly misspelled or unusual website addresses

  • Urgent messages claiming account or refund issues

  • Login pages requesting extra or unusual information

Protect Yourself

  • Type official website addresses directly into your browser

  • Double-check URLs before logging in (Use the Hover Over Method!)

  • Never approve Duo or MFA requests you didn’t initiate

  • Report repeated MFA prompts or suspicious login pages

Remember: Approving an MFA request is the same as unlocking your account.

What You Should and Should NOT Share

Safe to Share (When Using Trusted Services)

  • Tax documents with reputable tax professionals or verified tax software

  • Financial information submitted through secure and official platforms

  • Employer tax forms received through official university or employer systems

Never Share

  • Social Security numbers through email, text messages, or unsolicited phone calls

  • Tax account usernames or passwords

  • Full banking or payment details with unknown individuals or services

  • Photos of tax forms or financial records on social media

Tips to Stay Secure During Tax Season

  • File taxes early to reduce the chance of someone filing fraudulently using your identity
  • Use strong, unique passwords and enable multi-factor authentication
  • Verify website addresses before entering sensitive information
  • Be cautious with unexpected tax-related messages or urgent requests
  • Store tax documents securely and shred paper copies when no longer needed
  • Report suspicious emails, links, or login requests using university phishing reporting tools

Cybersecurity Is a Shared Responsibility

Tax season can already be stressful. Taking a few extra moments to verify communications and protect your personal information can help prevent identity theft and financial loss.

If you are unsure whether a tax-related message is legitimate, pause, verify, and report it. When it comes to protecting your information, it is always better to be cautious.

Want to Learn More?

The Associated Press | Tax season is underway. Here’s what to know for stress-free filing with the IRS

IRS | Prepare to file in 2026: Get Ready for tax season with key updates, essential tips

Official IRS Resources

Where to Report Scams

State Tax Authority

If your state has a tax department (like a Department of Revenue), they also host scam alerts and reporting tools.