The IRS issued a fraud alert this week about counterfeit notices being mailed to cryptocurrency holders. The letters direct recipients to a fake compliance portal that captures sensitive financial information, including wallet access, exchange credentials, and identities. The campaign aims to steal digital assets through official-looking correspondence.
The counterfeit letters
The fraudulent notices mimic official IRS correspondence, complete with letterhead and formatting designed to look legitimate. They instruct recipients to visit a fabricated compliance portal to resolve an alleged tax issue. Once there, victims are prompted to enter wallet private keys, exchange login details, and other sensitive data. The scammers are after not just crypto but also the credentials needed to drain accounts and impersonate victims.
IRS fraud alert
The IRS published the warning on August 2, 2026, urging crypto holders to be cautious. The agency said the letters are not from the IRS and that the compliance portal is a phishing operation. It reminded taxpayers that the IRS does not initiate contact by email, text, or social media to request personal or financial information. The alert specifically called out the targeting of cryptocurrency holders, a group that has increasingly been hit by sophisticated scams.
What's at stake
The campaign goes after multiple layers of a victim's financial life. Wallet access gives scammers direct control over digital assets. Exchange credentials let them trade or withdraw funds. Identity information can be used for further fraud. The IRS noted that the letters appear to be part of a broader effort to exploit the complexity of crypto tax reporting, where holders may already be anxious about compliance.
The timing isn't great. Tax season is months away, but the IRS has been ramping up enforcement around crypto reporting. Scammers are piggybacking on that anxiety.
The IRS has not disclosed how many letters have been sent or whether any victims have been identified. The investigation is ongoing. Anyone who receives a suspicious letter is advised to contact the IRS directly through official channels — not the number or website listed in the notice.
