Loading story…
Fraudsters are running a broad IRS impersonation campaign through robocalls, voicemails, texts, and emails that use fake names such as Tax Mediation and Abatement Office, Tax Resolution Service Office, Taxpayer Abatement Assistance Office, American Tax Advocates, and American Tax Benefits. The messages claim the target has unresolved tax issues, a file in "final review," frozen accounts, missed filings, or access to penalty relief or refunds, then pressure them to call back numbers including 888-355-0728, 888-753-0127, 888-663-0866, 888-681-0352, 888-788-3067, 202-649-2801, 202-649-2790, 202-649-2783, 771-222-3150, 771-333-2237, 771-333-2065, 833-604-4139, 877-706-0402, 888-825-0405, 888-551-2231, 888-834-1048, 888-792-0335, 888-471-0706, 833-684-4075, 888-461-3098, and 888-796-1408. Some calls reportedly use spoofed caller ID, aliases such as Laura Christie and Tara C. Hutchinson, and AI-enhanced personalization to appear legitimate.
The operation relies on classic social engineering: threats of arrest, fines, deportation, license revocation, liens, asset seizure, or collection escalation, alongside false promises to settle tax debts "for pennies on the dollar" or secure refunds. Victims are pushed to disclose personal data, IRS account credentials, and banking details, or to send money through gift cards, wire transfers, prepaid debit cards, or cryptocurrency; some lures also direct targets to phishing sites or malware-bearing links. The warnings align with the IRS Dirty Dozen advisory for the filing season, which highlighted impersonation, phishing, account theft, and malware risks targeting taxpayers and tax professionals. Officials and consumer alerts stress that the IRS generally initiates contact by postal mail, not unsolicited calls, texts, or social media, and urge victims to hang up, avoid calling back, verify any issue only through official IRS channels, and report incidents to TIGTA, the FTC, or phishing@irs.gov.
Get the infrastructure and lures behind it.
19 events from the most recent confirmed update back to the earliest known activity.
Online Threat Alerts published a consumer warning about a 'Tax Help Now' scam involving unsolicited tax-related outreach, spoofed emails, fake texts, and high-pressure tactics to steal money or sensitive information. The warning also noted common lures such as promises of guaranteed large refunds and demands for immediate payment via wire transfer, gift cards, or cryptocurrency.
A warning described fraudulent robocalls, voicemails, texts, and emails impersonating 'American Tax Benefits' and similar names, claiming urgent options to resolve back taxes or waive penalties in order to lure victims into calling back.
A warning described a 'Tax Resolution and Mediation Office' scam using phishing calls and emails, with fraudsters impersonating IRS agents or tax mediators and threatening arrest, liens, or asset seizure to force payment.
A warning on April 29, 2026 said 833-604-4139 was used in scam calls impersonating a tax mediation and abatement office, with a caller identifying as 'Laura Christie' and urging immediate callback about IRS-related debt resolution.
A warning described scammers impersonating a so-called 'Tax Conflict Mediation Office' or similar agency through calls, texts, and emails, using spoofing, fear tactics, and in some cases AI-enhanced personalization.
Additional warnings identified numbers 888-788-3067 and 202-649-2783 as being used in tax-themed impersonation scams involving fake 'Tax Mediation and Abatement Office' claims and urgent callback demands.
Warnings described scam calls and robocalls claiming to be from a 'Tax Abatement and Relief Office' or similar entity, using fake debt-relief promises, urgency, and requests for personal information or upfront fees.
Warnings identified scam calls using numbers including 771-222-3150, 771-333-2237, and 202-649-2790, with callers impersonating an 'Office of Tax Abatement Mediation' and using final-review language to force callbacks.
A warning described scam calls from 888-551-2231 falsely claiming to represent a 'Tax Resolution Service Office' and alleging unresolved tax issues, penalties, and urgent deadlines.
Online Threat Alerts warned that 888-663-0866 was being used in an IRS-themed scam in which callers claimed to represent a tax mediation or abatement office and urged urgent callbacks.
Warnings described scammers impersonating a fake 'Tax Mediation Support Office,' including use of the name Tara C. Hutchinson and spoofed numbers such as 771-333-2065 and 888-681-0352 to pressure victims over alleged tax issues.
Warnings described a broader scam campaign in which callers claimed to represent a 'Tax Mediation and Abatement Office' or similar entity, using urgency about tax reviews or negotiations to pressure victims into calling back and disclosing information.
A warning described an IRS impersonation scam using number 888-825-0405 and the fake entity 'Tax Filing Support and Mediation Office' to pressure victims through calls, texts, emails, and fake IRS links.
A scam campaign using 877-706-0402 was reported as impersonating IRS agents or tax-relief experts, using threats and false debt-settlement promises to steal money and personal information.
A warning stated that 'Tax Help and Filing Adjustment Office' and similar names were fictitious and that number 888-792-0335 was not associated with the IRS or any government agency.
Warnings described scam campaigns impersonating the IRS, Taxpayer Advocate Service, or fake tax-relief entities such as 'American Tax Advocates' and promoting bogus 'abatement adjustment' or tax mediation services through threatening calls and voicemails.
Further warnings identified tax-themed impersonation scams using numbers such as 771-247-3526 and 888-796-1408, with callers threatening fines or legal action to obtain money or personal information.
The IRS released its annual 'Dirty Dozen' list for the 2026 filing season, warning taxpayers, businesses, and tax professionals about tax scams including IRS impersonation, identity theft, phishing, and malware campaigns.
Online Threat Alerts published warnings about several IRS-themed impersonation scams using numbers including 888-471-0706, 833-684-4075, and 888-461-3098, with callers posing as fake tax-resolution offices to steal money and sensitive information.
Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.
Indicator values are masked on this page. View all 16 in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.
Get the infrastructure, lures, and IOCs behind this campaign, ready to push into your email and identity stack.
33 references tracked. Mallory keeps watching after this page renders.
onlinethreatalerts.com
Open sourceonlinethreatalerts.com
Open sourceonlinethreatalerts.com
Open sourceonlinethreatalerts.com
Open sourcefoxbusiness.com
Open sourceonlinethreatalerts.com
Open sourceonlinethreatalerts.com
Open sourceonlinethreatalerts.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Criminals are running **IRS impersonation scams** during tax filing season, using phone calls, emails, and texts to pressure victims into paying alleged tax debts or “fines,” or to trick them into disclosing sensitive personal and financial information. Common tactics include spoofed caller ID/sender details, use of official-looking IRS branding, and urgent threats (e.g., arrest or penalties) designed to short-circuit normal verification steps. Guidance highlighted for defenders and end users includes treating unsolicited IRS outreach as suspicious (the IRS typically initiates contact via mailed letters), refusing demands for immediate payment, and recognizing that requests for payment via **gift cards** or **cryptocurrency** are strong indicators of fraud. One reported lure centers on the phone number **`833-727-9955`** being used in “IRS scam calls,” consistent with broader IRS-themed social engineering that may be further amplified by **AI-enabled** voice/text techniques to increase credibility and scale.
Jun 29, 2026
Scammers are impersonating tax-relief firms under names including **Universal Tax Advocates**, **Universal Tax Associates**, and **Tax Relief Advocates** to pressure victims into paying bogus upfront fees or surrendering sensitive personal and financial information. The campaign reportedly uses robocalls, text messages, phishing emails, and caller ID spoofing to claim targets owe back taxes, then promises to eliminate or sharply reduce that debt through supposed special programs such as **"Fresh Start."** Targets are being urged to verify any tax issue only through official IRS channels and to avoid responding to unsolicited messages or calls demanding payment or personal data. Suspected phishing emails and scam calls should be reported to the IRS, TIGTA, and the FTC via **ReportFraud.ftc.gov**, while anyone who disclosed SSNs or banking details should begin identity-theft mitigation steps and closely monitor financial accounts for fraud.
Aug 6, 2026
Fraudsters are using names similar to **Universal Tax Associates** to target U.S. taxpayers with impersonation and tax-fraud schemes delivered by unsolicited calls, texts, and emails. The messages reportedly claim victims owe back taxes or qualify for unusually large refunds, then pressure them to send money through wire transfers, cryptocurrency, gift cards, or prepaid debit cards, or to click phishing links that harvest Social Security numbers and financial account data. The warnings also note that dishonest tax preparers may falsify income, divert refunds through hidden fees, or promise unrealistic payouts to lure victims. Consumers are being urged to avoid engaging with suspicious contacts and to verify any tax issue directly with the IRS rather than through unsolicited outreach. Suspected phishing emails should be reported to **`phishing@irs.gov`**, impersonation calls to TIGTA, and related fraud complaints to the **Federal Trade Commission**, which continues to serve as a central reporting channel for consumer scams.
Jul 16, 2026