Key Takeaways
- The IRS never sends texts, emails, or social media messages about your refund.
- Forward suspicious texts to 7726 (SPAM) and emails to phishing@irs.gov.
- Real IRS refund holds arrive by mail as notices like CP05 or CP53E.
- The IRS's 2026 Dirty Dozen list ranks phishing and smishing as the top scam threat.
If you got a text saying your tax refund is “approved,” “on hold,” or “ready for direct deposit,” it didn’t come from the IRS. The agency doesn’t send text messages about your refund, full stop, and it doesn’t email you first either. Its own guidance is blunt about it: “We don’t send text messages without your permission.”
That single fact clears up most of the confusion I hear about these messages. If it showed up in your texts or inbox out of nowhere, it’s not real, no matter how official the logo or the “irs.gov” link in it looks.
How the Text Scam Actually Works
The message usually claims your refund has been “processed” or is waiting on you to “verify your identity” through a link. Some now use QR codes instead of links, which the IRS flagged as a growing tactic in its 2026 Dirty Dozen list of tax scams.
Click through, and you land on a fake page built to look like IRS.gov. It asks for your Social Security number, bank account and routing numbers, or a driver’s license photo. Hand that over and scammers can file a fraudulent return in your name, redirect your real refund, or open credit accounts using your identity.
The IRS also documented more than 600 fake social media accounts impersonating the agency or tax professionals in fiscal 2025 alone, so the same playbook now shows up in DMs and comment replies, not just texts.
How the IRS Actually Contacts You
The real process is slower and more boring than any scam text, which is exactly the tell. Per the IRS’s own published policy: “the first contact is normally by letter delivered by the U.S. Postal Service.”
A phone call or an in-person visit can follow a mailed notice, but only after that first letter. The IRS also lists specific things it says it will never do, by phone, text, or email:
- Demand immediate payment without letting you question or appeal the amount first.
- Require a specific payment method, like a prepaid debit card or gift card.
- Threaten to call the police, immigration agents, or a lawsuit for not paying on the spot.
- Ask for your credit or debit card number over the phone.
- Initiate contact by text message or social media at all.
If a message does any of those things, you already have your answer.
Real Notice vs. Fake Text: Two Examples
Take Maria, who gets a text reading “Your $1,437 refund is approved, confirm your bank details to receive it” with a link. There’s no letter that came before it, and the IRS never asked for her routing number by text.
That’s every sign of a scam at once. The right move is to not click, not reply, and report it.
Compare that to Robert, who gets a CP05 notice in the mail saying his return is under review before his refund is released. It’s unsettling, but it’s a real IRS notice with a real notice number, sent the way the IRS actually sends things.
I walk through what a CP05 means and how long the review takes in my CP05 and 4464C letters guide. The newer CP53E freeze notice works the same way — mail first, a real notice number, a specific 30-day window — which I cover in my CP53E notice breakdown.
Get IRS refund and scam alerts by email
I post an update whenever a new scam wave or a real IRS refund change is worth knowing about. Get those in your inbox.
Free. You’ll get my new posts, including these updates. Unsubscribe anytime, and check your spam folder for the confirmation email.
How to Check Your Refund the Safe Way
Skip any link in a text or email entirely. Go straight to IRS.gov yourself and use the Where’s My Refund tool or the IRS app, or check the refund schedule and cycle chart I keep updated for typical direct deposit timing.
If you’re not sure whether a notice number is real, call the IRS directly using a number you look up yourself, never one printed in the message. My guide to actually reaching a real person at the IRS has the numbers that work and what to expect on hold times.
How to Report It
Forward a suspicious text to 7726 (spells “SPAM” on most keypads), which routes it to your carrier for blocking. For email or text scams claiming to be the IRS, the agency’s own instructions are specific.
Send it to phishing@irs.gov with the subject line “IRS Phishing Scam” for email, or “Text” for a text message. Paste in the sender’s number and the full message rather than just forwarding it.
Separately, report it to the FTC at ReportFraud.ftc.gov. If you already gave up personal information, go straight to IdentityTheft.gov for a personalized recovery plan, which can include an IRS Identity Protection PIN so nobody else can file a return using your Social Security number.
Where These Scams Trip People Up
I get a version of the same few questions every filing season, so here’s where I see people go wrong.
- Assuming a familiar-looking number means it’s real. Caller ID and sender numbers are trivially spoofed. A text “from” a number that looks local, or even one that matches a real IRS line, proves nothing.
- Ignoring a real notice because it feels like a scam. CP05 and CP53E letters use dry, form-letter language that people sometimes assume is fake. Missing the response window on a real notice causes actual refund delays.
- Trusting a link because the page looks right. A convincing fake IRS.gov login page is one of the easiest things for a scammer to build. The web address, not the design, is what to check.
- Not reporting it because nothing was lost. Reporting a scam text even when you didn’t click helps the IRS and FTC track and shut down the campaign faster for everyone else.
What to Watch For Next Filing Season
These texts spike every year between late January and April, when a “refund” claim is most believable. I expect that to hold for the 2027 season too.
The IRS’s 2026 Dirty Dozen list already flagged AI-generated voice calls and QR-code links as the fastest-growing versions of this scam. Those are harder to spot on sight than the clumsy, typo-filled texts from a few years ago.
I’ll update this page if the IRS changes its reporting address or adds a new tactic to watch for once the 2027 Dirty Dozen list comes out, typically each March.
