London Daily

Focus on the big picture.
Thursday, Sep 10, 2026

Scammers posing as IRS use credible emails to threaten victims

Scammers posing as IRS use credible emails to threaten victims

Scammers impersonating the Internal Revenue Service are perfecting the art of fraud, according to a new report.
Scammers impersonating the Internal Revenue Service are perfecting the art of fraud, according to a new report.

Scams posing as official IRS communication have been around for years - the problem is they become more credible every year, according to research from Abnormal Security, an email security company. The news was first reported by cybersecurity news site Bleeping Computer.

This time, a fake IRS email targeting users of Microsoft’s Office 365 is making the rounds, estimated to have reached as many as 70,000 inboxes, according to a blog summarizing the research.

The fake email claims it has been sent to collect payments. It also threatens to press legal charges.

What makes it more convincing than the usual scam is the attacker’s spoofing technique and language.

The email appears to originate from the “irs.gov” domain, “a credible impersonation of the IRS,” Abnormal Security says.

“Both the spoofed ‘irs.gov’ sender domain and the specific IDs assigned to the recipient give the email a false sense of legitimacy. Additionally, the email creates a sense of authority through its tone and professional language," Abnormal said.

That, combined with urgency – a key component of most legal scams – can cause victims to act rashly and pay off outstanding debts in order to avoid arrest. In this scam, the fraudster claims that they have contacted the person before and that the case has escalated.

“This is meant to provoke immediate action, as the recipient may feel they cannot delay their payment any longer,” Abnormal Security said.

The email also contains specific language such as unique account and loan numbers, as well as docket and warrant IDs. “By using seemingly specific information, the attacker strengthens the aura of legitimacy of the attack, increasing the likelihood of the victim engaging,” the report said.

And the language and the grammar – though not perfect -- are more convincing than usual. Less-effective email scams are riddled with language and grammatical mistakes.

There is a giveaway, however, as is the case with all scams.

A closer look shows the emails' header is actually "shoesbagsall.com."

“Additionally, the reply-to field is a dead giveaway that something is not quite right as it redirects the replies to legal.cc@outlook.com instead of the IRS support mailing address,” according to Bleeping Computer. But not everyone sees these indicators.

Here’s the most important thing to keep in mind to protect yourself: this is not how the IRS operates.

“The IRS will never initiate contact with taxpayers via email about a tax bill, refund or Economic Impact Payments,” according to an advisory from the IRS.

“Don't click on links claiming to be from the IRS. Be wary of emails and websites − they may be nothing more than scams to steal personal information,” the IRS said.
Newsletter

Related Articles

0:00
0:00
Close
Buckingham Palace Says Prince Harry and Meghan Will Not Resume Official Royal Duties
UK Treasury Faces Calls to Scrap £100,000 Childcare Support Threshold
Trades Union Congress Urges Labour Government to Rewrite Migration Policy
Riot Police Deployed After Anti-Migrant Protests Turn Violent in Portsmouth
UK Considers Replacing Some Disability Cash Payments With Direct Services
JPMorgan’s Jamie Dimon Warns UK Chancellor Against Higher Banking Taxes
UK Announces New Sanctions Targeting Israeli Settlements in West Bank
Metropolitan Police Investigate Alleged Illegal Donations to Reform UK
UK Charges Wiltshire Man With Assisting Russian Intelligence
UK Orders Urgent Review After Air Traffic Failure Cancels More Than 2,000 Flights
Merz Rebukes AfD Expansion in Saxony-Anhalt
King Charles Confirms Prince Harry and Meghan Will Remain Private Citizens
Labour Selects Former Child Refugee for By-Election in Keir Starmer’s Former Seat
Foreign Private Equity Accelerates Takeovers of London-Listed Industrial Companies
NHS Maternity Care Faces Scrutiny Over Support for Mothers After Caesarean Births
BBC Warns Staff Strikes Are Likely Amid Job Cuts and Programme Cancellations
English Housing Affordability Improves to Best Level in More Than a Decade
UK Health Commission Proposes Framework for Wider AI Adoption Across NHS
Labour Faces Pressure for Wealth Tax Ahead of Autumn Budget
Metropolitan Police Open Criminal Investigation Into Alleged Foreign Donations to Reform UK
UK Police Deploy Riot Officers After Anti-Immigration Unrest in Portsmouth and Dover
UK Defends Sanctions on Israeli Settlements Despite Diplomatic Retaliation
UK Air Traffic Control Failure Cancels More Than 1,000 Flights and Disrupts 65,000 Passengers
Compass Urges £10 Million Wealth Tax and Public Ownership Ahead of UK Autumn Budget
UK Government’s Devolution Plans Face House of Lords Scrutiny
Maldives Seeks New Chagos Sovereignty Talks With UK Prime Minister Andy Burnham
UK Airports Face Continuing Disruption After National Air Traffic Control Failure
UK Bans Imports From Israeli Settlements and Expands Sanctions on Iran
British Chambers of Commerce Forecasts UK Growth of 1% as Investment Remains Weak
UK Suspends Local Government Reorganisation Decisions and Cancels Planned Shadow Authority Polls
UK Parliament Opens Inquiry Into Gaps in Climate Change Preparedness
Andy Burnham and Xi Jinping Hold Talks on Trade, Security and British Consular Cases
UK Joins France, Canada and Other Nations in Measures Against Israeli West Bank Settlements
UK Announces New Sanctions Targeting Iranian Nuclear and Military Networks
British Chambers of Commerce Calls for Business Rate Reform and Productivity Support
UK Farmers Warn Dry Summer Could Reduce Crop Yields and Push Up Food Prices
UK Rail Networks Hit by Widespread Delays After Major Signalling Failures
Matt Clifford Resigns as ARIA Chair After Conflict-of-Interest Scrutiny
UK and France Say Joint Border Operations Have Prevented More Than 48,000 Irregular Channel Crossings
UK Core Inflation Remains Above Expectations as Utility and Commodity Costs Stay Elevated
Jaguar Land Rover Considers Up to 4,000 UK Job Cuts Amid Automotive Industry Pressure
UK Government Pauses Local Authority Reorganisation for Legal Review
UK Public Borrowing Reaches £1.8 Billion in July, Adding Pressure Before Autumn Budget
Chancellor John Healey Puts Regional Devolution and Fiscal Discipline at Heart of UK Growth Plan
Counter-Terrorism Police Lead Salford Investigation After Two Teenagers Charged
UK Rejects Financial Reparations for Transatlantic Slavery
UK and Egypt Step Up Diplomacy Over Escalating West Bank Tensions
UK Pauses Council Reorganisation Across Four English Counties
Jaguar Land Rover Plans 4,000 Job Cuts in Major UK Restructuring
UK Unveils Planning and Regulatory Overhaul to Speed Infrastructure and Economic Growth
×