IRS warns: AI tax scams rising
The IRS put AI‑enabled tax scams on its 'Dirty Dozen' watchlist for 2026, warning that synthetic voices and sophisticated phishing are being used to impersonate tax authorities and extract money from retirees. The alert elevates fraud risk for older clients who are frequent scam targets. (foxbusiness.com)
The IRS published press release IR-2026-30 on March 5, 2026, issuing its annual Dirty Dozen list and tying the announcement to National “Slam the Scam Day,” a release quoted IRS Chief Executive Officer Frank J. Bisignano urging vigilance. (irs.gov ) AI-enabled phone impersonation was listed specifically as item #2 on the 2026 Dirty Dozen, described as including robocalls, voice mimicry and spoofed caller ID, and the IRS reiterated it generally contacts taxpayers by mail first and will not demand immediate payment or threaten arrest by phone. (irs.gov ) The IRS reported more than 600 social‑media impersonators during fiscal year 2025 and flagged QR codes and fake webpages in phishing messages as active vectors for data collection and malware installs. (irs.gov ) Industry telemetry and tracker services show large-scale voice‑scam activity this filing season: YouMail’s Robocall Index recorded roughly 3.8 billion robocalls in February 2026, Nomorobo warned IRS‑style scam calls spiked about 400% during recent tax seasons, and the FTC told the Associated Press that robocalls, texts and phishing are up this tax season with AI likely amplifying attempts. (robocallindex.com nomorobo.com abcnews.com ) The IRS Tax Tip published Jan. 8, 2026, explicitly called out people age 65 and older or nearing retirement as frequent targets and promoted Identity Protection PINs as a preventive measure for taxpayers with Social Security numbers or ITINs. (irs.gov ) Security firms and reporting outlets documented how scammers are using AI to reference retirement status, Medicare eligibility or beneficiary details and to recreate official phone trees to build trust, a tactic highlighted in coverage by FedSmith and Malwarebytes. (fedsmith.com malwarebytes.com ) The IRS framed the Dirty Dozen campaign within its Security Summit partnership with state tax agencies and industry partners and reminded tax professionals of legal obligations to maintain a Written Information Security Plan and to use multi‑factor authentication. (irs.gov )