Key Takeaways
- Each tax season, scammers target unsuspecting taxpayers with evolving schemes designed to steal refunds and sensitive personal information.
- The Internal Revenue Service (IRS) publishes an annual Dirty Dozen list highlighting some of the most dangerous tax scams honest taxpayers should watch for.
- Working with an experienced tax professional and wealth manager can help you evaluate suspicious tax advice, avoid tax scams and better protect your personal information.
In the midst of the 2026 tax season, scammers are once again ramping up efforts to steal taxpayers’ personal information, such as Social Security numbers, bank account details and tax refunds. Each year, the Internal Revenue Service releases its annual “Dirty Dozen” list, which outlines 12 of the most common and dangerous tax scams targeting honest taxpayers during tax season. The 2026 Dirty Dozen list underscores how these evolving schemes are increasingly using technology to trick people into sharing sensitive information.
In contrast to past years, 2026 marks a significant uptick in the use of artificial intelligence (AI) to power tax scams. Fraudsters are using AI-driven deepfakes, voice mimicry and misleading social media content to make IRS impersonation scams and fake tax advice feel more convincing. When combined with tried-and-true tactics like phishing emails, text messages and spoofed caller IDs, these AI-enabled scams can be difficult to spot.
Below we walk through how tax scams typically work, highlight key categories from the 2026 IRS Dirty Dozen tax scams list, and offer practical steps you can take to help protect your personal information this tax season.
How Tax Scams Work: Common Red Flags Across the Dirty Dozen
To avoid tax scams, it helps to understand the patterns behind these dangerous threats. Scammers typically contact taxpayers through unsolicited channels, such as text messages, phone calls, emails, social media posts or mailed “notices,” and they often claim to represent the IRS or another government agency. Their goal is to create a sense of fear or urgency so that you share personal information or make a payment before you have time to verify their identity.
Common red flags across the 2026 Dirty Dozen tax scams list include:
- Demands for immediate payment – Scammers may insist you have unpaid tax debt and must pay right away using unusual methods, such as gift cards, wire transfers, prepaid debt cards or cryptocurrency. The IRS will never demand payment this way or threaten arrest over the phone or by text.
- Requests for sensitive information – Fraudsters may ask you to “verify” or “update” your Social Security number, bank account, credit card information or Identity Protection PIN (IP PIN) via email, text or social media. The IRS doesn’t initiate contact with taxpayers by text messages or social media to request personal or financial information.
- Spoofed caller IDs and fake emails – IRS impersonation scams often use spoofed caller IDs or official-looking email addresses and logos to appear legitimate. Messages that include links or QR codes to “IRS” portals may actually lead to fake websites designed to steal your data or install malware.
- “Too good to be true” tax advice – Many emerging scams promise big refunds, clean energy credits or unique real estate trust strategies that rarely apply to typical taxpayers. Following false information can lead to refund delays, audits and penalties.
The IRS emphasizes that most legitimate taxpayer contacts begin with a letter in the mail, not aggressive phone calls, social media messages or texts. If you receive a suspicious communication urging you to click a link to “claim a refund” or “fix your tax account,” stop and verify through official channels before taking any action.
For additional background on common financial fraud tactics, see Creative Planning’s 7 Common Financial Scams and How to Avoid Them and 8 Tips for Keeping Your Financial Information Secure.
The 2026 Dirty Dozen: Key Scam Categories to Watch
The IRS’s 2026 Dirty Dozen list highlights both persistent and emerging scams impacting taxpayers this tax season. While not exhaustive, the categories below capture some of the most pressing issues the IRS and tax professionals are seeing in the United States.
IRS impersonation scams and urgent payment demands
At the top of the Dirty Dozen are IRS impersonation scams, where fraudsters pretend to be IRS agents or other Internal Revenue Service officials. They may reach out by phone, text, email or social media and claim that you owe back taxes, that your IRS online account has been locked or that your refund has been frozen.
AI and spoofed caller IDs make these impersonation schemes feel even more real. Some scammers use voice cloning to mimic officials or send realistic-looking “news releases” or messages referencing the annual Dirty Dozen list to appear credible.
These messages often include QR codes or links that lead to fake portals, phony IRS online accounts or spoofed tax administration sites that harvest your personal information and IP PIN. A common tactic is to threaten large penalties, wage garnishment or law enforcement action unless you make immediate payment.
To avoid these scams, remember: the IRS doesn’t demand immediate payment by gift card, cryptocurrency or wire transfer, and it won’t threaten to have you arrested over the phone. When in doubt, independently contact the IRS or your tax professional to verify the legitimacy of any tax debt.
For more on recognizing tax scams directly from the IRS, review Recognize Tax Scams and Fraud.
Identity theft and refund-related fraud
Identity theft remains a core focus of the 2026 IRS Dirty Dozen tax scams. In these schemes, scammers use stolen personal information to file false tax returns, claim refunds or nab credits under your name before you file your legitimate return.
Some evolving schemes involve:
- Overstated withholding and fabricated wage data – Fraudsters may create fake W-2 forms or manipulate wage and withholding data to generate inflated refunds and fraudulent self-employment or fuel tax credits.
- Spearfishing tax pros – Scammers send targeted phishing emails to tax preparers and tax professionals, posing as potential clients or business contacts. The messages may include malicious attachments or links that compromise systems and expose sensitive taxpayer information.
- Compromised IRS online account access – In some cases, identity thieves try to gain access to taxpayers’ IRS online accounts or use stolen credentials to reroute refunds or access more personal data.
The IRS and its Security Summit partners have noted an increase in identity theft‑related tax scams this season. If your return is rejected because one has already been filed under your Social Security number, that’s a major red flag that identity theft may have occurred.
Creative Planning’s Best Practices for Avoiding Identity Theft and The Cost of Identity Theft provide additional steps you can take to safeguard your personal information.
Social media, AI and “too good to be true” tax advice
Several items on the Dirty Dozen list involve misleading tax advice shared on social media platforms or through AI-generated content. Viral posts and videos sometimes claim taxpayers can receive huge refunds by claiming obscure fuel tax credits, clean energy credits, real estate trust strategies or special relief programs that don’t actually apply to most people.
AI can amplify these threats by creating convincing deepfake videos that appear to feature tax experts or generating robocalls and messages that sound legitimate. Following this false information can lead to rejected returns, refund delays, audits and penalties — even if you were misled into filing incorrect claims.
The bottom line? If a social media tax “hack” or strategy promises unusually large refunds or sounds too good to be true, it probably is. A qualified tax professional is a far better source of personalized tax advice than a viral video. For a deeper look at why social media is a risky place for financial guidance, see Creative Planning’s Why You Shouldn’t Take Financial Advice From Social Media.
Fake charities, ghost preparers and other special-issue scams
The 2026 Dirty Dozen list also highlights a number of special‑issue scams that prey on taxpayers’ generosity or trust in professionals.
Common examples include:
- Fake charities – Scammers set up bogus charities or crowdfunding campaigns, often following high-profile events or disasters, and use IRS-sounding language in “news releases” or solicitations. They may ask for donations via gift cards, wire transfers or hard-to-trace methods and use the opportunity to steal personal information under the guise of charitable giving.
- Ghost preparers and OIC mills – Ghost tax preparers refuse to sign the returns they prepare, leaving taxpayers fully responsible for false claims and potential penalties. Some offer-in-compromise (OIC) mills charge high fees and promise to settle tax debt for “pennies on the dollar,” even when taxpayers don’t qualify.
- New capital gains and real estate trust schemes – The IRS has warned about new undistributed capital gains and real estate‑adjacent arrangements being promoted as ways to avoid tax, which can create significant risks if they rely on abusive interpretations of the law.
To reduce your risk, only donate to established charities using their verified websites, check preparer credentials through official channels and avoid any tax preparer who refuses to sign your return or bases fees on the size of your refund.
For more on charitable giving and tax rules, see Creative Planning’s Charitable Donation Changes in 2026.
How to Protect Your Sensitive Information and Avoid 2026 Tax Scams
When it comes to Dirty Dozen tax scams, prevention is key. The following steps can help you protect your sensitive information and reduce your risk this tax season:
- Access your IRS online account only by typing “irs.gov” directly into your browser or using the official IRS app — never through links in emails, texts or social media messages.
- Never share sensitive personal information (Social Security number, bank account details, IP PIN) with anyone who contacts you unexpectedly. Only provide this information to known contacts via secure channels.
- Enable multi-factor authentication on your financial accounts and IRS online account where available, and set up alerts to notify you of unusual activity or changes.
- Be skeptical of unsolicited tax advice, emails or messages that reference the Dirty Dozen list or “dangerous threats” and push you toward quick action.
- Work with a trusted tax professional or wealth manager to review unusual offers, tax strategies or credits before making any moves. These professionals can help spot red flags that might be easy to miss.
Creative Planning’s Strategic Tax Planning Services for High‑Net‑Worth Families and Tax‑Efficient Wealth Management can add an extra layer of oversight when evaluating complex tax ideas.
What to Do if You Believe You’re a Victim of an IRS Tax Scam
If you suspect you’ve been caught in a tax scam, it’s important to act quickly. Consider taking these steps:
- Immediately cease all communication with the suspected scammer. Don’t send money, provide additional information or click any further links.
- Document everything you can remember, including dates, phone numbers, email addresses, messages received and any payments made.
- Report IRS-related phishing attempts to [email protected], and visit the IRS’s page on how to recognize tax scams and fraud.
- Visit identitytheft.gov to report identity theft, and follow the recommended recovery steps.
- Contact local law enforcement if money has been stolen or you believe your personal safety may be at risk.
For broader fraud‑prevention guidance, Creative Planning’s Protect Yourself From Financial Fraud and National Slam the Scam Day articles share additional best practices.
Navigating Tax Season With Confidence
The IRS’s 2026 Dirty Dozen list offers a snapshot of the most dangerous and evolving tax scams threatening honest taxpayers this year. While AI and new technologies are changing how scams are delivered, the core protection strategies remain the same: verify all contacts, protect your personal information and question any advice that seems too good to be true.
