{"id":76258,"date":"2026-08-02T03:54:13","date_gmt":"2026-08-02T03:54:13","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/irs-warns-fake-crypto-letters-target-wallets-and-personal-data\/"},"modified":"2026-08-02T03:54:13","modified_gmt":"2026-08-02T03:54:13","slug":"irs-warns-fake-crypto-letters-target-wallets-and-personal-data","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/irs-warns-fake-crypto-letters-target-wallets-and-personal-data\/","title":{"rendered":"IRS Warns Fake Crypto Letters Target Wallets and Personal Data"},"content":{"rendered":"<p><b>(Originally posted on : Bitcoin News )<\/b><br \/>\n<\/p>\n<div>\n<div class=\"@container mb-[25px] rounded-sm overflow-clip py-0.5 pr-0.5 pl-2.5 bg-success-100\">\n<div class=\"flex flex-col gap-m overflow-clip rounded-[6px] !bg-success-10 p-3 @[420px]:p-m\">\n<h2 class=\"m-0 flex items-center gap-s text-[19px] !text-[#1c1c1c] md:text-[20px]\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"16\" height=\"10\" viewbox=\"0 0 16 10\" fill=\"none\" class=\"shrink-0 text-success-100\" aria-hidden=\"true\"><path d=\"M1 1.5h14\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><path d=\"M1 8.5h10\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><\/svg><span>Key Takeaways<\/span><\/h2>\n<ul class=\"m-0 flex list-none flex-col gap-m pl-0\">\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Fake IRS letters direct crypto holders toward a fraudulent portal.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">QR codes lead victims to websites built to resemble IRS.gov.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Criminals seek wallet details, exchange logins, and personal data.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<h2>Counterfeit Letters Exploit Growing Crypto Tax Anxiety<\/h2>\n<p>The Internal Revenue Service (IRS) issued <a href=\"https:\/\/www.irs.gov\/compliance\/criminal-investigation\/fraud-alert-fake-irs-letters-target-cryptocurrency-holders\" target=\"_blank\" rel=\"noopener noreferrer\">a fraud alert about fake letters targeting cryptocurrency holders<\/a> on July 30, reflecting increasingly sophisticated impersonation schemes aimed at investors. Recipients are instructed to register through a nonexistent \u201cDigital Asset Compliance Portal\u201d before an urgent deadline, creating pressure to act before verifying the demand.<\/p>\n<p>Each fraudulent letter contains a QR code directing recipients toward a website designed to resemble IRS.gov and collect valuable account information. The counterfeit portal may request personal details, cryptocurrency wallet information, exchange credentials, recovery phrases, private keys, or other data capable of enabling theft.<\/p>\n<p>IRS Criminal Investigation (IRS-CI) Chief Jarod Koopman warned:<\/p>\n<blockquote>\n<p>\u201cCriminals continue to exploit public trust in government agencies by creating convincing fake websites and official-looking correspondence. Before responding to unexpected requests for personal information, stop, verify the source, and report potential fraud schemes to law enforcement.\u201d<\/p>\n<\/blockquote>\n<p>Crypto exchange Coinbase (Nasdaq: COIN) and cybersecurity firm Darktower traced the operation\u2019s infrastructure to a domain registered through a Hong Kong registrar shortly before the letters circulated. Investigators found the website hosted in Romania on a network previously associated with phishing pages impersonating financial institutions, according to the agency.<\/p>\n<h2>IRS Guidance Helps Taxpayers Identify Fraudulent Demands<\/h2>\n<p>The IRS alert on fake letters targeting cryptocurrency holders warns that unsolicited QR codes and urgent deadlines are common signs of fraud. <a href=\"https:\/\/www.irs.gov\/help\/tax-scams\" target=\"_blank\" rel=\"noopener noreferrer\">Official IRS guidance on tax scams<\/a> also identifies unexpected messages, threats, financial pressure, and requests for personal information as warning signs of impersonation. The agency advises recipients not to scan unsolicited QR codes, open suspicious links, or share account credentials before verifying the correspondence through official IRS channels.<\/p>\n<p>Taxpayers receiving suspicious letters can check their secure IRS Online Account, review recognized notice formats, or contact customer service directly for authentication. <a href=\"https:\/\/www.irs.gov\/newsroom\/ways-to-tell-if-the-irs-is-reaching-out-or-if-its-a-scammer\" target=\"_blank\" rel=\"noopener noreferrer\">IRS guidance for determining whether a notice is legitimate<\/a> explains these verification methods. Fraudulent letters, emails, texts, websites, social media accounts, and telephone calls can also be reported through the agency\u2019s <a href=\"https:\/\/www.irs.gov\/help\/report-fraud\/report-fake-irs-treasury-or-tax-related-emails-and-messages\" target=\"_blank\" rel=\"noopener noreferrer\">channels for reporting fake tax-related communications<\/a>.<\/p>\n<h2>Identifying Legitimate Tax Notices and Crypto Impersonation Schemes<\/h2>\n<p>Impersonation scams have also targeted exchange customers through spoofed calls, texts, emails, fabricated security alerts, and false claims that assets require immediate protection. A separate <a href=\"https:\/\/news.bitcoin.com\/coinbase-security-impersonation-scheme-exposed-as-authorities-claim-nearly-16m-was-siphoned\/\">alleged Coinbase impersonation scheme affecting about 100 victims<\/a> allegedly stole nearly $16 million after users transferred funds into attacker-controlled wallets.<\/p>\n<p>Anyone who disclosed credentials should immediately change affected passwords, notify the relevant financial institution or cryptocurrency exchange, preserve messages and letters, and monitor accounts. The IRS also recommends multifactor authentication, while wallet holders should never disclose recovery phrases or private keys under any claimed compliance requirement.<\/p>\n<p>Other government agencies have issued similar warnings as criminals increasingly combine impersonation tactics with cryptocurrency fraud. The <a href=\"https:\/\/www.fbi.gov\/investigate\/cyber\/alerts\/2025\/unsolicited-packages-containing-qr-codes-used-to-initiate-fraud-schemes\" target=\"_blank\" rel=\"noopener noreferrer\">FBI has warned that unsolicited QR codes can direct users to phishing websites<\/a> or prompt them to download malicious software. The Federal Trade Commission has also cautioned that <a href=\"https:\/\/consumer.ftc.gov\/new-crypto-payment-scam-alert\" target=\"_blank\" rel=\"noopener noreferrer\">scammers posing as government officials<\/a> often demand cryptocurrency payments through QR codes or crypto ATMs.<\/p>\n<\/p><\/div>\n<p><a href=\"https:\/\/news.bitcoin.com\/regulation-and-legal\/irs-warns-fake-crypto-letters-target-wallets-and-personal-data\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Bitcoin News ) Key Takeaways Fake IRS letters direct crypto holders toward a fraudulent portal. QR codes lead victims to websites built to resemble IRS.gov. Criminals seek wallet details, exchange logins, and personal data. Counterfeit Letters Exploit Growing Crypto Tax Anxiety The Internal Revenue Service (IRS) issued a fraud alert about [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":76259,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[32],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/76258"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=76258"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/76258\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/76259"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=76258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=76258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=76258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}