London Daily

Focus on the big picture.
Tuesday, Jul 07, 2026

Scammers posing as IRS use credible emails to threaten victims

Scammers posing as IRS use credible emails to threaten victims

Scammers impersonating the Internal Revenue Service are perfecting the art of fraud, according to a new report.
Scammers impersonating the Internal Revenue Service are perfecting the art of fraud, according to a new report.

Scams posing as official IRS communication have been around for years - the problem is they become more credible every year, according to research from Abnormal Security, an email security company. The news was first reported by cybersecurity news site Bleeping Computer.

This time, a fake IRS email targeting users of Microsoft’s Office 365 is making the rounds, estimated to have reached as many as 70,000 inboxes, according to a blog summarizing the research.

The fake email claims it has been sent to collect payments. It also threatens to press legal charges.

What makes it more convincing than the usual scam is the attacker’s spoofing technique and language.

The email appears to originate from the “irs.gov” domain, “a credible impersonation of the IRS,” Abnormal Security says.

“Both the spoofed ‘irs.gov’ sender domain and the specific IDs assigned to the recipient give the email a false sense of legitimacy. Additionally, the email creates a sense of authority through its tone and professional language," Abnormal said.

That, combined with urgency – a key component of most legal scams – can cause victims to act rashly and pay off outstanding debts in order to avoid arrest. In this scam, the fraudster claims that they have contacted the person before and that the case has escalated.

“This is meant to provoke immediate action, as the recipient may feel they cannot delay their payment any longer,” Abnormal Security said.

The email also contains specific language such as unique account and loan numbers, as well as docket and warrant IDs. “By using seemingly specific information, the attacker strengthens the aura of legitimacy of the attack, increasing the likelihood of the victim engaging,” the report said.

And the language and the grammar – though not perfect -- are more convincing than usual. Less-effective email scams are riddled with language and grammatical mistakes.

There is a giveaway, however, as is the case with all scams.

A closer look shows the emails' header is actually "shoesbagsall.com."

“Additionally, the reply-to field is a dead giveaway that something is not quite right as it redirects the replies to legal.cc@outlook.com instead of the IRS support mailing address,” according to Bleeping Computer. But not everyone sees these indicators.

Here’s the most important thing to keep in mind to protect yourself: this is not how the IRS operates.

“The IRS will never initiate contact with taxpayers via email about a tax bill, refund or Economic Impact Payments,” according to an advisory from the IRS.

“Don't click on links claiming to be from the IRS. Be wary of emails and websites − they may be nothing more than scams to steal personal information,” the IRS said.
Newsletter

Related Articles

0:00
0:00
Close
UK Met Office Issues Heatwave Alerts for London and Southern England
Keir Starmer Blocks Earlier World Cup Kick-Off Time for England Match Against Mexico
NHS Digital Transformation and Media Consolidation Highlight UK Policy Priorities
UK Government Pushes Digital Trade Rules to Cut Export Costs for Businesses
Bank of England Plans Leverage Rule Changes to Support Government Bond Market
UK Police Operation Targets Organised Immigration Crime Networks With Hundreds of Arrests
Yvette Cooper Calls for Global AI Rules to Prevent Security Risks
NHS Begins Major AI Expansion Through £10 Billion Digital Investment Programme
UK Government Tightens Rules on Political Donations to Limit Foreign Influence
Keir Starmer Defends UK Defence Spending Plan at NATO Summit in Turkey
Comcast’s Sky Agrees £1.6 Billion Deal to Acquire ITV Media and Entertainment Division
Senior NHS Doctors Vote in Favour of Renewed Strike Action Over Pay Dispute
Andy Burnham Set to Succeed Keir Starmer as Labour Leadership Nominations Open
Microsoft Lays Off 4,800 Employees and Xbox Suffers the Hardest Blow
Deep Purple Has Released Its Best Album in Decades
Office for National Statistics Updates Historical Investment Data Review to Improve Accuracy
Department for Science, Innovation and Technology Highlights Economic Gains From Digital Inclusion
Debate Intensifies Over UK Defence Strategy and Domestic Security Priorities
Report Warns Full Transport Accessibility Could Add £176 Billion to UK Economy Annually
Medicines Regulator Approves First Targeted Treatment for Advanced Merkel Cell Skin Cancer
Government Commits £22 Million to Brighton Seafront Infrastructure Renewal and Transport Safety
National Security Bill Returns to House of Commons Amid Calls to Protect Humanitarian Work
Government Tightens Overseas Political Donation Rules to Strengthen Safeguards Against Foreign Influence
NHS Maternity Reform Expands Central Oversight After Critical National Review
Dover Border Warnings Highlight Post-Brexit Pressure on Cross-Channel Trade
Private Nuclear Consortium Advances £35 Billion Small Reactor Strategy in UK
UK Labour Leadership Signals Shift Toward Reindustrialisation and Regional Power
House of Lords Debates Rail Nationalisation Bill to Create Great British Railways
Scottish Affairs Committee Expands Inquiry Into SNP Financial Conduct
Evri Launches £1.2 Million Defamation Case Against BBC Over Panorama Investigation
Port of Dover Warns of Border Delays as EU Entry-Exit System Looms
Nigel Farage Referred to Standards Watchdog Over Alleged Undeclared Benefits
UK Government Faces Scrutiny Over Claimed AI Datacentre Investment After FOI Findings
UK and India Finalise Trade Agreement Rules Ahead of Mid-July Implementation
UK Government Establishes National Maternity Commissioner After Major Review of NHS Care Failures
Private Consortium Plans £35 Billion UK Nuclear Programme Targeting Small Modular Reactor Rollout
Andy Burnham Sets Out Ten-Year Reindustrialisation and Devolution Plan as Leadership Transition to UK Premiership Advances
Morocco and France Advance as 2026 FIFA World Cup Enters Quarterfinals.
Historic 2026 Tour de France Opens in Barcelona With Revamped Team Time Trial.
Global Mergers and Acquisitions Approach $4 Trillion Defying Geopolitical Tumult.
Negotiators Advance 20-Point Framework for Gaza Ceasefire and Demilitarization.
OECD Warns Middle East Conflict Will Depress Global Economic Growth.
Ukrainian Drones Strike Major Oil Terminal in St. Petersburg.
World Meteorological Organization Issues Urgent Alert Over Rapidly Intensifying El Niño.
United States Commemorates 250th Anniversary With Diplomatic Summits and Global Flotilla.
Iran Begins Days-Long Funeral for Supreme Leader Khamenei Amid Strait of Hormuz Standoff.
Technology giant reports surging carbon emissions driven by artificial intelligence infrastructure demands.
Artificial intelligence adoption accelerates workforce reductions across the technology and financial sectors.
Global technology and financial conglomerates collaborate to launch a new stablecoin standard.
United States regulators lift export restrictions on a major frontier artificial intelligence model.
×