Did You Get an IRS Crypto Compliance Letter? It Probably Isn’t Real
The US Internal Revenue Service (IRS) warned that scammers are mailing counterfeit letters to crypto holders, directing them to a fake "Digital Asset Compliance Portal" built to steal digital assets and personal data.
The agency's Criminal Investigation unit issued the fraud alert on Thursday. It said the letters carry QR codes that send recipients to a spoofed website.
How the Fake IRS Letters Work
The counterfeit notices tell recipients they must enroll in the portal before a deadline. The IRS stressed that it does not operate any such portal and is not sending the letters.
Once victims scan the QR code, the fraudulent site asks them to enter personal information. The agency urged taxpayers not to scan QR codes from unsolicited letters, emails, or texts. It also told people to hang up on callers demanding payment.
The use of physical mail marks a shift from typical crypto phishing. Coinbase and threat intelligence firm DarkTower flagged the campaign this week.
Their investigation found the letters reference tax years 2017 through 2026. Moreover, the look-alike domain was registered through a Hong Kong registrar and hosted in Romania.
… Continue reading the full article at the original source below.
