Tax Season Security Guide
Tax season is in full swing and while you are gathering documents, cybercriminals are busy refining their tactics. The IRS recently released its 2026 “Dirty Dozen” list of tax scams and nearly half are related to a surge in sophisticated impersonation schemes. To protect your identity and your refund requires more than just a strong password, it requires having a proactive defense. Here are the some ways you can protect yourself this tax season:
Watch out for Digital Impersonators. The most prevalent threats this year involve cybercriminals posing as the IRS through multiple digital channels. Remember than the IRS will only communicate with you via old fashioned mail.
Phishing & Smishing: You may receive emails or texts with "urgent" notices about refund delays or account problems. These often include QR codes or links to fake websites designed to steal your information.
AI-Enhanced Phone Scams: Scammers are now using AI-generated voices and spoofed caller IDs to mimic official IRS agents. They may demand immediate payment via untraceable methods like gift cards or cryptocurrency.
Fake Charity Drives: Fraudsters often exploit tragedies and disasters by creating fake charities to collect donations and personal information. Giving to charity is a great way to reduce your tax burden but ensure that you are giving to a valid and qualified tax-exempt organization by checking this list.
Work with a Tax Professional. As the IRS does not have formal requirements on who can prepare tax returns, there are some shady characters out there providing tax advice. Some are interested in stealing your personal information and others want to sell you a tax-savings scheme.
Social Media "Tax Hacks": Be wary of viral advice suggesting you can claim non-existent credits, such as a broad "self-employment tax credit." These promoted "hacks" can lead to audits and penalties.
Ghost preparers. A “ghost” preparer prepares a return but refuses to sign it and/or refuses to include a Preparer Tax Identification Number (PTIN). When a preparer refuses to sign or provide a PTIN, that is a major red flag. The taxpayer is always legally responsible for what is filed.
Aggressive or misleading Offer in Compromise marketing (“OIC mills”). The Offer in Compromise program can help certain eligible taxpayers resolve tax debt when they are unable to pay in full, but “OIC mills” often overpromise results and charge high fees to taxpayers who don’t qualify. Taxpayers can check eligibility using free IRS tools to avoid high-pressure sales tactics.
Follow an Essential Security Checklist. To keep your data secure while filing this season, follow these best practices:
Avoid Public Wi-Fi: Never provide your tax information or access your IRS account using public Wi-Fi at cafes or libraries. Always use a secure, private connection.
Secure Document Exchange: Do not send sensitive tax documents as standard email attachments. Use encrypted portals or secure file-sharing links provided by your tax professional.
Get an IP PIN. The single most effective tool for preventing tax-related identity theft in 2026 is the IRS Identity Protection PIN (IP PIN). This program prevents a cybercriminal from filing a return with your information and receiving a refund of your tax paid.