Loading story…
reliefsignup.com has been identified as a phishing and data-harvesting site that impersonates government relief, grant, and tax-assistance programs, including a purported Fresh Start Tax Relief offer. Victims are reportedly targeted through unsolicited text messages and automated calls promising relief money, then directed to the site to submit personal and financial information. The operation is described as using fake benefit claims to capture sensitive data and funnel users into third-party marketing offers.
Reports warn that people who interact with the site may face identity theft, spam, malware exposure, subscription traps, or unauthorized charges. Guidance for affected users includes contacting their bank, reporting identity theft through official channels such as IdentityTheft.gov, and filing complaints with scam-reporting services including the BBB Scam Tracker. The reporting also notes that legitimate U.S. government benefit programs do not typically use random .com domains or require fees to release payments.
Get the infrastructure and lures behind it.
1 event from the most recent confirmed update back to the earliest known activity.
Online Threat Alerts described reliefsignup.com as a phishing and data-harvesting scam that uses unsolicited texts and automated calls promising about $5,000 in government relief or tax assistance to lure victims into submitting personal information. The reporting says the site may redirect users to third-party offers and expose them to subscription traps, unauthorized charges, identity theft, spam, or malware.
Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.
Indicator values are masked on this page. See the values in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.
Get the infrastructure, lures, and IOCs behind this campaign, ready to push into your email and identity stack.
3 references tracked. Mallory keeps watching after this page renders.
onlinethreatalerts.com
Open sourceonlinethreatalerts.com
Open sourcebbb.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Scammers are impersonating tax-relief firms under names including **Universal Tax Advocates**, **Universal Tax Associates**, and **Tax Relief Advocates** to pressure victims into paying bogus upfront fees or surrendering sensitive personal and financial information. The campaign reportedly uses robocalls, text messages, phishing emails, and caller ID spoofing to claim targets owe back taxes, then promises to eliminate or sharply reduce that debt through supposed special programs such as **"Fresh Start."** Targets are being urged to verify any tax issue only through official IRS channels and to avoid responding to unsolicited messages or calls demanding payment or personal data. Suspected phishing emails and scam calls should be reported to the IRS, TIGTA, and the FTC via **ReportFraud.ftc.gov**, while anyone who disclosed SSNs or banking details should begin identity-theft mitigation steps and closely monitor financial accounts for fraud.
Aug 6, 2026
U.S. consumer protection officials and fraud trackers warned that scammers are using robocalls and unsolicited calls to falsely claim people owe back taxes or qualify for special tax-debt relief, then pressuring them to act immediately. The schemes invoke IRS-related language, including the **Fresh Start** name, to create legitimacy while demanding urgent responses, and they often rely on fabricated deadlines, threats, and promises to reduce or erase tax debt. Reports say operations using names such as **New Fresh Start Tax Associates** may function as scams or predatory lead-generation services, charging large upfront fees, misrepresenting the IRS program, and in some cases harvesting or reselling victims' personal information. Officials stressed that the real IRS Fresh Start initiative is not a standalone application program and advised consumers to hang up on unexpected tax-debt calls, verify any tax issues directly through **IRS.gov**, report suspected fraud to the **FTC**, and seek assistance only from verified CPAs or credentialed tax attorneys.
Aug 21, 2026
Fraudsters are running a broad IRS impersonation campaign through robocalls, voicemails, texts, and emails that use fake names such as **Tax Mediation and Abatement Office**, **Tax Resolution Service Office**, **Taxpayer Abatement Assistance Office**, **American Tax Advocates**, and **American Tax Benefits**. The messages claim the target has unresolved tax issues, a file in "final review," frozen accounts, missed filings, or access to penalty relief or refunds, then pressure them to call back numbers including `888-355-0728`, `888-753-0127`, `888-663-0866`, `888-681-0352`, `888-788-3067`, `202-649-2801`, `202-649-2790`, `202-649-2783`, `771-222-3150`, `771-333-2237`, `771-333-2065`, `833-604-4139`, `877-706-0402`, `888-825-0405`, `888-551-2231`, `888-834-1048`, `888-792-0335`, `888-471-0706`, `833-684-4075`, `888-461-3098`, and `888-796-1408`. Some calls reportedly use spoofed caller ID, aliases such as **Laura Christie** and **Tara C. Hutchinson**, and AI-enhanced personalization to appear legitimate. The operation relies on classic social engineering: threats of arrest, fines, deportation, license revocation, liens, asset seizure, or collection escalation, alongside false promises to settle tax debts "for pennies on the dollar" or secure refunds. Victims are pushed to disclose personal data, IRS account credentials, and banking details, or to send money through gift cards, wire transfers, prepaid debit cards, or cryptocurrency; some lures also direct targets to phishing sites or malware-bearing links. The warnings align with the IRS **Dirty Dozen** advisory for the filing season, which highlighted impersonation, phishing, account theft, and malware risks targeting taxpayers and tax professionals. Officials and consumer alerts stress that the IRS generally initiates contact by postal mail, not unsolicited calls, texts, or social media, and urge victims to hang up, avoid calling back, verify any issue only through official IRS channels, and report incidents to **TIGTA**, the **FTC**, or `phishing@irs.gov`.
Jul 2, 2026