I’ve been tracking financial fraud for over a decade, and 2026 is officially the “Year of the Machine.” The IRS just released its “Dirty Dozen” list, and it’s a masterclass in how scammers are weaponizing AI and social media to steal your hard-earned money.
If you think you’re too smart to get scammed, you’re exactly the person they’re looking for. Here is the full, unvarnished breakdown of what I’m seeing on the front lines.
:::note[TL;DR]
- The Core Threat: Scammers are shifting from generic emails to surgical, AI-powered impersonation.
- Red Flags: The IRS will never call you to demand immediate payment or threaten arrest via prerecorded message.
- The Pivot: We’re seeing a massive spike in “Ghost” preparers and fabricated withholding schemes.
- Arjun’s Advice: If a tax “hack” comes from a 15-second TikTok video, it’s probably a felony. :::
The “New Tech” Traps: AI & Identity Theft
1. AI-Enabled Phone Scams (Voice Mimicry)
Phone scams have evolved past the “robot voice” stage. Scammers now use AI to mimic the professional, calm tone of an IRS agent—or even someone you know.
The Scenario: You’re in the middle of a grocery run, kids screaming in the cart, when your phone rings. Caller ID says “IRS.” You pick up, and a voice—sounding exactly like a tired but polite government worker—tells you there’s a discrepancy in your 2025 filing. They mention your employer by name. They sound so normal that you don’t even think twice before “confirming” your SSN to “clear things up.”
The Reality Check: I’ve tested these voice clones in red-team drills. They can mimic urgency and empathy perfectly. Remember: The IRS will almost always mail you a letter first. They don’t leave threatening prerecorded messages.
Your Move (AI Defense): If a call feels “off,” turn on your phone’s Live Caption or AI Transcription feature. Synthetic voices often have microscopic lags or “flat” emotional peaks that are visible in a transcript but hard to hear. You can also use AI call-screening apps that require the caller to state their purpose before your phone even rings—scammers’ AI bots often trip up on these interactive filters.
2. Phishing & Smishing (The QR Code Trap)
This is the classic entry point, now supercharged by LLMs. Scammers send emails or texts (smishing) that look identical to official IRS correspondence.
- The Lure: “Your refund has been recalculated. Scan this code to claim your $1,400 check.”
- The Trap: The QR code takes you to a pixel-perfect clone of IRS.gov where you “log in” using your bank details.
- The Fix: Never click unsolicited links. The IRS reported over 600 social media impersonators in 2025 alone.
Your Move (AI Defense): Don’t click—audit. Copy the text of any suspicious message and paste it into a private LLM like Claude or ChatGPT. Ask: “Analyze this message for social engineering patterns and logical inconsistencies. Does this sound like a legitimate government communication?” AI is brilliant at spotting the “urgency-scarcity” loops that scammers use to stress you into making mistakes.
3. Identity Theft via Online Account Access
Criminals are using stolen info to gain unauthorized access to taxpayers’ IRS online accounts. Or, they pose as “helpers” to walk you through setting up an account, only to steal your data during the process.
The “Viral” Scams: Social Media & False Advice
4. Viral “Tax Hacks”
This is the biggest driver of fraud I’m seeing this year. Viral posts suggest “hacks” like inflating withholding or claiming credits you don’t qualify for.
The Scenario: You’re scrolling through TikTok at 2 AM and see a “tax expert” with 2M followers explaining how you can get a $10,000 refund by “adjusting” your Form W-2 to show zero income. The comments are full of people saying it worked. You think, “Why should I pay the government if there’s a loophole?”
The Reality: These aren’t loopholes; they’re fraudulent filings. The IRS is aggressively auditing these social-media-driven claims. Knowingly filing a fraudulent return can lead to civil and criminal penalties.
Your Move (AI Defense): Use AI to strip away the viral hype. If you see a “hack,” ask your LLM to fact-check it: “Search official IRS.gov documentation for [Name of Credit/Hack]. Summarize the eligibility requirements and tell me if the claim in this TikTok [Paste Claim] is consistent with federal law.” Most AI models will immediately flag the discrepancy between a viral “loophole” and the actual tax code.
5. Bogus “Self-Employment Tax Credit”
You’ve seen the ads: “Get thousands back for being self-employed!” Most of these are aggressive marketing scams encouraging inaccurate filings. If you file a bogus claim under this provision, you’re doing so at your own risk.
The “Professional” Fraud: Preparers & Promoters
6. Ghost Preparers
A “Ghost” preparer prepares your return but refuses to sign it or include a PTIN (Preparer Tax Identification Number).
The Scenario: You find a “specialist” on Instagram who promises a huge refund for a flat $500 fee. You send them your docs via DM. They send you back the finished filing, but the “Preparer” section is blank. They tell you to “just sign it as Self-Prepared to avoid the red tape.”
Red Flag: When they disappear with your $500 and the IRS flags the return for fraud, you are the only one legally responsible. Never sign a blank or incomplete return.
7. Overstated Withholding Schemes
Scammers are telling people to inflate their “other withholding” amounts to manufacture a massive refund. They report zero or little income on incorrect forms (W-2, 1099-NEC, etc.).
Arjun’s Warning: The IRS cross-references these against third-party records. If they don’t match, your refund is frozen, and an audit is triggered.
8. Spear-Phishing Targeting Tax Pros
Tax professionals are high-value targets. Scammers send “New Client” or “Document Request” emails with malicious attachments to gain access to their entire client database.
The AI Defense: Enterprise security suites now use NLP (Natural Language Processing) to analyze the intent of incoming attachments. Instead of just scanning for known viruses, the AI asks, “Does the language of this email logically match the type of file attached?” If a “new client” email contains aggressive urgency and an executable file instead of a standard tax PDF, the AI quarantines it immediately.
9. “OIC Mills” (Aggressive Marketing)
The Offer in Compromise (OIC) program is real, but “OIC mills” charge huge fees to taxpayers who they know don’t qualify. They overpromise results using high-pressure sales tactics.
The “Complex” Scams: Forms & Credits
10. Abusive Form 2439 Claims (The New Entry)
This is the “notable change” on this year’s list. Scammers are fabricating claims using Form 2439 (Notice to Shareholder of Undistributed Long-Term Capital Gains). They link these claims to fake organizations or even well-known companies that aren’t actually investment funds.
11. Fake Charities
Fraudsters love a good tragedy. Whenever a disaster hits, fake charities pop up faster than real ones. They steal your “donation” and your personal data in one go.
12. Non-Cash Charitable Contribution Schemes
These involve inflated appraisals of donated property—like art or “syndicated conservation easements.” Promoters promise massive tax reductions based on made-up valuations.
How to Protect Your Identity in 2026
- Mail First: The IRS generally contacts you by mail first.
- No Gift Cards: The IRS does not demand payment via gift cards, wire transfers, or crypto.
- Verify via IRS.gov: Always use the official “Where’s My Refund?” tool.
- Report Fraud: Forward phishing attempts to phishing@irs.gov.
:::warning[Arjun’s AI Privacy Rule] When using AI to audit messages or fact-check credits, never paste your real Social Security Number, bank account details, or home address. Use placeholders like “Taxpayer X” or “Employer Y.” Use AI to verify the logic of the communication, not to process your actual private data. :::
FAQ
What is “Slam the Scam Day”?
It’s a national awareness day (March 5) focused on educating the public about identity theft and social engineering schemes.
Can the IRS arrest me over the phone?
No. Any caller threatening immediate jail time is a scammer.
What if I already filed a “hack” I saw online?
Consult a reputable tax professional immediately. You may need to file an amended return to correct the errors before the IRS flags it.
What to Read Next
- AI-Powered Phishing: Why You Can No Longer Trust Your Inbox — Arjun’s guide to deepfake detection.
- AI Agent Security: Protecting the New Perimeter — Securing your autonomous systems.
- Securing Your Digital Identity in 2026 — Best practices for the modern dev.
