Money news you can use
IRS tax fraud reporting page (2026): what to do if you're targeted
A plain-English response guide for reporting tax scams, organizing evidence, and protecting your connected finance setup afterward.
Stitch Editorial Team · Updated March 15, 2026 (Published February 26, 2026)
- Explains when the new IRS reporting path is useful
- Shows what details to gather before filing a report
- Covers post-report account safety steps for app users
The IRS launched a dedicated tax fraud and scam reporting page to make reporting clearer. That's useful, but people still need one thing most alerts don't provide: a practical response sequence they can run in the moment.
If you've been targeted, the right move is gather details first, report through official paths, then harden your connected-account setup so the same attack path doesn't stay open. You can do this without turning the week into a full-time project.
When to use the IRS reporting page
Use it when a scam is tax-related: fake IRS contact, identity misuse tied to filing, or suspicious tax-refund activity.
It's not a replacement for immediate account security actions. Reporting and containment should happen in parallel.
What to gather before you submit
Capture message content, timestamps, sender details, links, and any transaction evidence. Clean notes reduce back-and-forth later.
If money moved, document account lane, amount, and posted status quickly while records are easy to trace.
Post-report account cleanup
After reporting, review connected app permissions, remove stale links, and verify recurring bill lanes still operate normally.
This is where many people stop too early. Reporting without cleanup leaves residual risk in place.
How households should respond together
If more than one person manages household money, agree on one response owner and one communication log.
That keeps actions coherent and prevents duplicate, conflicting fixes under stress.
Tax-scam response checklist
- Document suspicious messages, links, and timestamps before deleting anything.
- Submit a report through official IRS channels when incident type matches.
- Review recent transactions and transfer activity for unexplained movement.
- Clean up connected-account permissions and verify recurring bill integrity.
Helpful next reads
Two tax-scam response scenarios
Example 1: Fake IRS text with urgent refund claim
A user gets a text claiming a $1,240 refund is blocked unless they verify identity through a short link in 30 minutes.
They avoid the link, report through official channels, and prevent credential compromise.
Example 2: Household receives spoofed call and email
One partner gets a call, the other gets a follow-up email with matching script language. They almost submit personal data twice through separate forms.
One response owner and shared log keep reporting and cleanup consistent.
Common mistakes
- Reporting immediately without preserving useful evidence first.
- Treating reporting as complete response and skipping connected-account cleanup.
Pro tips
- Use only official channels you navigate to directly, never links from inbound messages.
- Run a 7-day transaction review after any scam event to confirm no delayed misuse appears.
How Stitch helps
Stitch makes post-scam verification faster by centralizing transaction review, recurring obligations, and short-window cash-flow planning.
Patch supports coordinated household response without forcing full account merges, so trust and containment work together.
Frequently asked questions
Does this IRS page replace reporting to my bank?
No. If account misuse is involved, you should still contact your financial institution immediately.
What evidence helps most in a report?
Message content, sender details, links, timestamps, and any related transaction records.
Should I click links to verify if a message is real?
No. Navigate directly to official sites and accounts you trust.
Can scam impact show up days later?
Yes. That's why a follow-up transaction review for the next week is important.
How should households coordinate scam response?
Use one response owner and one shared action log to avoid conflicting steps.
How does Stitch help after reporting?
Stitch helps verify transaction integrity, recurring bill continuity, and near-term cash-flow stability after a scam event.