Loading story…
Fraudsters are using names similar to Universal Tax Associates to target U.S. taxpayers with impersonation and tax-fraud schemes delivered by unsolicited calls, texts, and emails. The messages reportedly claim victims owe back taxes or qualify for unusually large refunds, then pressure them to send money through wire transfers, cryptocurrency, gift cards, or prepaid debit cards, or to click phishing links that harvest Social Security numbers and financial account data. The warnings also note that dishonest tax preparers may falsify income, divert refunds through hidden fees, or promise unrealistic payouts to lure victims.
Consumers are being urged to avoid engaging with suspicious contacts and to verify any tax issue directly with the IRS rather than through unsolicited outreach. Suspected phishing emails should be reported to phishing@irs.gov, impersonation calls to TIGTA, and related fraud complaints to the Federal Trade Commission, which continues to serve as a central reporting channel for consumer scams.
Get the infrastructure and lures behind it.
3 events from the most recent confirmed update back to the earliest known activity.
An article warned about scams using names similar to 'Universal Tax Associates' to target U.S. taxpayers through impersonation and tax-related fraud. It highlighted unsolicited contacts, fake tax debt or refund claims, phishing links, and dishonest tax preparer behavior.
An article warned that unsolicited communications using the name 'Universal Tax Council' were likely part of a tax relief or IRS impersonation scam. It described pressure tactics, fake guaranteed relief claims, requests for sensitive data, and payment demands via wire transfer, cryptocurrency, or gift cards.
A Federal Trade Commission reference related to protecting consumers was published. The provided content does not include incident-specific details beyond the publication itself.
Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.
Indicator values are masked on this page. See the values in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.
Get the infrastructure, lures, and IOCs behind this campaign, ready to push into your email and identity stack.
3 references tracked. Mallory keeps watching after this page renders.
onlinethreatalerts.com
Open sourceonlinethreatalerts.com
Open sourceftc.gov
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Scammers are impersonating tax-relief firms under names including **Universal Tax Advocates**, **Universal Tax Associates**, and **Tax Relief Advocates** to pressure victims into paying bogus upfront fees or surrendering sensitive personal and financial information. The campaign reportedly uses robocalls, text messages, phishing emails, and caller ID spoofing to claim targets owe back taxes, then promises to eliminate or sharply reduce that debt through supposed special programs such as **"Fresh Start."** Targets are being urged to verify any tax issue only through official IRS channels and to avoid responding to unsolicited messages or calls demanding payment or personal data. Suspected phishing emails and scam calls should be reported to the IRS, TIGTA, and the FTC via **ReportFraud.ftc.gov**, while anyone who disclosed SSNs or banking details should begin identity-theft mitigation steps and closely monitor financial accounts for fraud.
Aug 6, 2026
Fraudsters are running a broad IRS impersonation campaign through robocalls, voicemails, texts, and emails that use fake names such as **Tax Mediation and Abatement Office**, **Tax Resolution Service Office**, **Taxpayer Abatement Assistance Office**, **American Tax Advocates**, and **American Tax Benefits**. The messages claim the target has unresolved tax issues, a file in "final review," frozen accounts, missed filings, or access to penalty relief or refunds, then pressure them to call back numbers including `888-355-0728`, `888-753-0127`, `888-663-0866`, `888-681-0352`, `888-788-3067`, `202-649-2801`, `202-649-2790`, `202-649-2783`, `771-222-3150`, `771-333-2237`, `771-333-2065`, `833-604-4139`, `877-706-0402`, `888-825-0405`, `888-551-2231`, `888-834-1048`, `888-792-0335`, `888-471-0706`, `833-684-4075`, `888-461-3098`, and `888-796-1408`. Some calls reportedly use spoofed caller ID, aliases such as **Laura Christie** and **Tara C. Hutchinson**, and AI-enhanced personalization to appear legitimate. The operation relies on classic social engineering: threats of arrest, fines, deportation, license revocation, liens, asset seizure, or collection escalation, alongside false promises to settle tax debts "for pennies on the dollar" or secure refunds. Victims are pushed to disclose personal data, IRS account credentials, and banking details, or to send money through gift cards, wire transfers, prepaid debit cards, or cryptocurrency; some lures also direct targets to phishing sites or malware-bearing links. The warnings align with the IRS **Dirty Dozen** advisory for the filing season, which highlighted impersonation, phishing, account theft, and malware risks targeting taxpayers and tax professionals. Officials and consumer alerts stress that the IRS generally initiates contact by postal mail, not unsolicited calls, texts, or social media, and urge victims to hang up, avoid calling back, verify any issue only through official IRS channels, and report incidents to **TIGTA**, the **FTC**, or `phishing@irs.gov`.
Jul 2, 2026
Criminals are running **IRS impersonation scams** during tax filing season, using phone calls, emails, and texts to pressure victims into paying alleged tax debts or “fines,” or to trick them into disclosing sensitive personal and financial information. Common tactics include spoofed caller ID/sender details, use of official-looking IRS branding, and urgent threats (e.g., arrest or penalties) designed to short-circuit normal verification steps. Guidance highlighted for defenders and end users includes treating unsolicited IRS outreach as suspicious (the IRS typically initiates contact via mailed letters), refusing demands for immediate payment, and recognizing that requests for payment via **gift cards** or **cryptocurrency** are strong indicators of fraud. One reported lure centers on the phone number **`833-727-9955`** being used in “IRS scam calls,” consistent with broader IRS-themed social engineering that may be further amplified by **AI-enabled** voice/text techniques to increase credibility and scale.
Jun 29, 2026