London Daily

Focus on the big picture.
Tuesday, Sep 22, 2026

Scammers posing as IRS use credible emails to threaten victims

Scammers posing as IRS use credible emails to threaten victims

Scammers impersonating the Internal Revenue Service are perfecting the art of fraud, according to a new report.
Scammers impersonating the Internal Revenue Service are perfecting the art of fraud, according to a new report.

Scams posing as official IRS communication have been around for years - the problem is they become more credible every year, according to research from Abnormal Security, an email security company. The news was first reported by cybersecurity news site Bleeping Computer.

This time, a fake IRS email targeting users of Microsoft’s Office 365 is making the rounds, estimated to have reached as many as 70,000 inboxes, according to a blog summarizing the research.

The fake email claims it has been sent to collect payments. It also threatens to press legal charges.

What makes it more convincing than the usual scam is the attacker’s spoofing technique and language.

The email appears to originate from the “irs.gov” domain, “a credible impersonation of the IRS,” Abnormal Security says.

“Both the spoofed ‘irs.gov’ sender domain and the specific IDs assigned to the recipient give the email a false sense of legitimacy. Additionally, the email creates a sense of authority through its tone and professional language," Abnormal said.

That, combined with urgency – a key component of most legal scams – can cause victims to act rashly and pay off outstanding debts in order to avoid arrest. In this scam, the fraudster claims that they have contacted the person before and that the case has escalated.

“This is meant to provoke immediate action, as the recipient may feel they cannot delay their payment any longer,” Abnormal Security said.

The email also contains specific language such as unique account and loan numbers, as well as docket and warrant IDs. “By using seemingly specific information, the attacker strengthens the aura of legitimacy of the attack, increasing the likelihood of the victim engaging,” the report said.

And the language and the grammar – though not perfect -- are more convincing than usual. Less-effective email scams are riddled with language and grammatical mistakes.

There is a giveaway, however, as is the case with all scams.

A closer look shows the emails' header is actually "shoesbagsall.com."

“Additionally, the reply-to field is a dead giveaway that something is not quite right as it redirects the replies to legal.cc@outlook.com instead of the IRS support mailing address,” according to Bleeping Computer. But not everyone sees these indicators.

Here’s the most important thing to keep in mind to protect yourself: this is not how the IRS operates.

“The IRS will never initiate contact with taxpayers via email about a tax bill, refund or Economic Impact Payments,” according to an advisory from the IRS.

“Don't click on links claiming to be from the IRS. Be wary of emails and websites − they may be nothing more than scams to steal personal information,” the IRS said.
Newsletter

Related Articles

0:00
0:00
Close
Michelin Guide Faces Industry Questions Over Restaurant Inspection Coverage
English Woodlands Face Renewed Weather Stress From Dry Conditions and Strong Winds
Research Finds Extensive Alcohol, Gambling and Unhealthy Food Branding During 2026 World Cup
Five Charged After Newborn Baby Dies From Stab Wounds in Sheffield
BT Could Reap £2 Billion From Recycling Copper as Full-Fibre Network Expands
FCA Urges Young Adults to Trace £1.5 Billion in Unclaimed Child Trust Funds
Reform UK Names Helen Jenner as New Leader in Wales After Dan Thomas Steps Down
Resolution Foundation Calls for Broad-Based Tax Rises to Fund Higher UK Defence Spending
Ed Davey Calls for Global Treaty to Halt Development of Super-Intelligent AI
Scotland Consults on Legal Price Caps for Essential Foods
NHS Productivity Reforms Could Prevent More Than 20,000 Early Deaths a Year, Report Says
United Kingdom and ASEAN Deepen Trade and Investment Cooperation
United Kingdom Deploys RAF Refuelling Support to Saudi Arabia After Houthi Attacks
UK Fiscal Headroom Shrinks as Higher Borrowing Costs Complicate Autumn Budget
UK Public Borrowing Jumps to £18.3 Billion in August, Raising Pressure Before Budget
Andy Burnham Reaffirms UK Net-Zero Target With £30 Million Community Energy Fund
Scottish Labour Leader Backs Rosebank and Jackdaw North Sea Projects
UK Consumer Confidence Falls to Three-Year Low
UK Diesel Prices Approach £2 a Litre as Global Supply Shortages Intensify
Chiltern Railways Returns to Public Ownership as UK Rail Nationalisation Advances
British Museum Faces Questions Over Peter Thiel’s Private Bayeux Tapestry Viewing
Earl Spencer Memoir Excerpts Renew Public Debate Over Diana’s Death
Liberal Democrats Gather in Brighton for Autumn Conference
Mothercare Shares Plunge as Middle East Store Closures Threaten Long-Term Solvency
Kent Police Treat Folkestone Hotel Fire as Suspicious
Caribbean Governments Advance Reparations Campaign Seeking Engagement With Britain
Scottish Labour Leader Backs Rosebank and Jackdaw North Sea Projects
FCA Urges Young Adults to Trace £1.5 Billion in Unclaimed Child Trust Funds
UK Competition Regulator Opens Inquiry Into McCormick-Unilever Foods Deal
Public Inquiry Into Tees, Esk and Wear Valleys Mental Health Failings Set to Begin
Nigel Farage Looks to US Immigration Enforcement Model for UK Border Policy
Chiltern Railways Moves Into Public Ownership
Security Review Raises Concerns Over Sensitive UK Police Data Stored on Microsoft Cloud
Burnham Government Warns of Difficult Autumn Budget as Fiscal Headroom Narrows
Bank of England Holds Rates at 3.75% as Inflation Rises to 3.1%
Ed Sheeran Tour Faces Backlash After Macklemore Is Removed Over Pro-Palestinian Remarks
Vandalism of Traffic Cameras Intensifies Across Parts of England
Nearly 300 Evacuated as Fire Hits Grand Burstin Hotel in Folkestone
King Charles Warns AI Executives About Risks From Uncontrolled Technology
Church of England Apologises for Role in Historical Forced Adoption Practices
UK Debate Over Online Speech Intensifies After Arrest Figures Draw Scrutiny
Oxfordshire Village Holds Symbolic Independence Vote Over Asylum Accommodation Plan
Nigel Farage and Richard Tice Sue National Crime Agency Over Alleged Banking Data Leaks
Apple Introduces Stricter Age Checks for UK Accounts
BBC Cash Reserves Fall 66% to £125 Million as Broadcaster Restructures
McLaren Announces £500 Million UK Investment and Plans 1,000 Jobs
Green Party Wins Historic Gorton and Denton By-Election as Labour Falls to Third
Burnham Government Prepares October Budget Under Growing Fiscal Pressure
UK Energy Suppliers Pull Fixed-Price Deals as Wholesale Markets Turn More Volatile
Bank of England Holds Rates at 3.75% as Middle East Energy Shock Raises Inflation Risks
×