London Daily

Focus on the big picture.
Friday, Feb 27, 2026

Scammers posing as IRS use credible emails to threaten victims

Scammers posing as IRS use credible emails to threaten victims

Scammers impersonating the Internal Revenue Service are perfecting the art of fraud, according to a new report.
Scammers impersonating the Internal Revenue Service are perfecting the art of fraud, according to a new report.

Scams posing as official IRS communication have been around for years - the problem is they become more credible every year, according to research from Abnormal Security, an email security company. The news was first reported by cybersecurity news site Bleeping Computer.

This time, a fake IRS email targeting users of Microsoft’s Office 365 is making the rounds, estimated to have reached as many as 70,000 inboxes, according to a blog summarizing the research.

The fake email claims it has been sent to collect payments. It also threatens to press legal charges.

What makes it more convincing than the usual scam is the attacker’s spoofing technique and language.

The email appears to originate from the “irs.gov” domain, “a credible impersonation of the IRS,” Abnormal Security says.

“Both the spoofed ‘irs.gov’ sender domain and the specific IDs assigned to the recipient give the email a false sense of legitimacy. Additionally, the email creates a sense of authority through its tone and professional language," Abnormal said.

That, combined with urgency – a key component of most legal scams – can cause victims to act rashly and pay off outstanding debts in order to avoid arrest. In this scam, the fraudster claims that they have contacted the person before and that the case has escalated.

“This is meant to provoke immediate action, as the recipient may feel they cannot delay their payment any longer,” Abnormal Security said.

The email also contains specific language such as unique account and loan numbers, as well as docket and warrant IDs. “By using seemingly specific information, the attacker strengthens the aura of legitimacy of the attack, increasing the likelihood of the victim engaging,” the report said.

And the language and the grammar – though not perfect -- are more convincing than usual. Less-effective email scams are riddled with language and grammatical mistakes.

There is a giveaway, however, as is the case with all scams.

A closer look shows the emails' header is actually "shoesbagsall.com."

“Additionally, the reply-to field is a dead giveaway that something is not quite right as it redirects the replies to legal.cc@outlook.com instead of the IRS support mailing address,” according to Bleeping Computer. But not everyone sees these indicators.

Here’s the most important thing to keep in mind to protect yourself: this is not how the IRS operates.

“The IRS will never initiate contact with taxpayers via email about a tax bill, refund or Economic Impact Payments,” according to an advisory from the IRS.

“Don't click on links claiming to be from the IRS. Be wary of emails and websites − they may be nothing more than scams to steal personal information,” the IRS said.
Newsletter

Related Articles

0:00
0:00
Close
UK Government Reaches Framework Agreement on Release of Mandelson Vetting Files
UK Police Contracts With Israeli Surveillance Firms Spark Debate Over Ethics and Oversight
United Airlines Passenger Hears Cockpit Conversations After Accessing In-Flight Audio Channel
Spain to Conduct Border Checks on Gibraltar Arrivals Under New Post-Brexit Framework
Engie Shares Jump After $14 Billion Agreement to Acquire UK Power Grid Assets
BNP Paribas Overtakes Goldman Sachs in UK Investment Banking League Tables
Geothermal Project to Power Ten Thousand Homes Marks UK Renewable Energy Milestone
UK Visa Grants Drop Nineteen Percent in 2025 as Migration Controls Tighten
Barclays and Jefferies Among Banks Exposed to Collapse of UK Mortgage Lender MFS
UK Asylum Applications Edge Down in 2025 Despite Rise in Small Boat Crossings
Jefferies Reports Significant Exposure After Collapse of UK Lender MFS
FTSE 100 Reaches Fresh Record Highs as Major Share Buybacks and Earnings Lift London Stocks
So, what's happened is, I think, government policy, not just under Labour, but under the Conservatives as well, has driven a lot of small landlords out of business.
Larry Summers, the former U.S. Treasury Secretary, is resigning from Harvard University as fallout continues over his ties to Jeffrey Epstein.
U.S. stocks ended higher on Wednesday, with the Dow gaining about six-tenths of a percent, the S&P 500 adding eight-tenths of a percent, and the tech-heavy Nasdaq climbing roughly one-and-a-quarter percent.
From fears of AI-fuelled unemployment to Big Tech's record investment, this is AI Weekly.
Apple just dropped iOS 26.4.
US Lawmakers Seek Briefing from UK Over Reported Encryption Order Directed at Apple
UK Business Secretary Calls on EU to Remove Trade Barriers Hindering Growth
Legal Pathways for Removing Prince Andrew from Britain’s Line of Succession Examined
PM Netanyahu welcome India PM Narendra Modi to Israel
Shadow Diplomacy: How Harry and Meghan’s Jordan Trip Undermines the Monarchy
Sir Jim Ratcliffe, co-owner of Manchester United, comments on immigration in the UK.
Bill Gates, the UN and the WEF are attempting to construct "a giant digital gulag for all of humanity" via digital ID, CBDCs and vaccine passport infrastructure.
Britain’s Channel Crisis: Paying Billions While the Boats Keep Coming
Downing Street’s Veteran Deception Scandal
UK HealthCare Expands ‘Food as Health’ Initiative Statewide to Tackle Chronic Illness in Kentucky
Leonardo Chief Says UK Set to Decide on New Medium Helicopter Programme
UK Slows Chagos Islands Agreement After Concerns Raised in Washington
European and UK Stock Markets Reach Fresh Highs as Banks and Miners Lead Rally
UK Government Insists Chagos Islands Negotiations Continue After Minister’s ‘Pause’ Remark
No Confirmed Deal for Engie to Acquire UK Power Networks Amid Market Speculation
UK Reaffirms Updated Entry Requirements for Travellers as of February 25, 2026
General Atlantic to sell equity stake in ByteDance, valuing the company at $550 billion
German Chancellor Friedrich Merz Secures Pledge from China for Greater Imports of Quality Goods
Lord Mandelson Condemns Arrest as Driven by ‘Baseless Suggestion’ He Would Flee Abroad
Former UK Ambassador Released on Bail Following Arrest in Epstein-Linked Investigation
UK Parliament Orders Release of Former Prince Andrew’s Government Vetting Files
Reddit Fined £14 Million by UK Regulator Over Failures in Age Verification Controls
UK Moves to Tighten Regulation of Netflix, Disney+ and Prime Video Under New Media Rules
British Woman Who Reported Rape in Hong Kong Faces Possible Prosecution
'Christianity is the religion that has made this country great.'
Man Receives Parking Ticket 38 Years After Offense: ‘City Officials Said It’s Legitimate’
Woman Receives Gift Card for Christmas – Discovers It Is ‘Worth’ 63,000,000,000,000,000 Pounds
UK Sanctions New Zealand Insurer Maritime Mutual Following Allegations Over Russian Oil Cover
Reform MP Danny Kruger Condemns UK’s ‘Unregulated Sexual Economy’ in Call for Tougher Controls
The Show Must Go On: Prince William and Kate Middleton Shine at the BAFTAs Amid Andrew’s Arrest
UK Sanctions Russian ‘Illicit Oil Traders’ After Email Blunder Exposes Sanctions Evasion Network
Russia Amplifies Baseless Claims That UK and France Plan to Arm Ukraine with Nuclear Weapons
UK Imposes Sanctions on Two Georgian Television Channels Over Alleged Russian Disinformation
×