"Action Required: Verify Your IRS Account" Email Scam
Scam email subject line
Action Required: Verify your IRS account
Known variants
Your IRS online account needs verification
IRS: Unusual activity detected on your account
Verify your IRS.gov account immediately
Important: IRS account security alert
IRS Dirty Dozen 2025 and 2026 list this as the #1 email scam. In 2026, these emails increasingly include QR codes directing to fake IRS websites. The IRS reported over 600 social media impersonators in fiscal 2025 using similar tactics.
Reports
IRS Dirty Dozen 2025 and 2026 #1 scam category
First documented
2023
Last active
2026-03
⚠ Email subject lines can be spoofed or randomized. Scammers frequently vary subject lines to evade spam filters. This page documents a subject line pattern reported to official government agencies. It is not a factual determination about any specific sender. Contact [email protected] if you believe your organization is listed in error.
Who this email pretends to be from
What this scam email says
Email appears to come from IRS.gov with alarming subject line about account verification. Body uses official IRS branding and may include a QR code or link to a fake IRS website. In 2026, some variants install malware or ransomware when links are clicked. The IRS Dirty Dozen 2026 specifically warns about QR code variants.
What this scam email looks like
From: [email protected] Subject: Action Required: Verify your IRS account Important Notice from the Internal Revenue Service We have detected unusual activity on your IRS online account. Your account has been temporarily restricted. To restore access, you must verify your identity within 24 hours. [Scan QR code below or click here to verify] Failure to verify may result in account suspension and delayed refunds. IRS Security Team IRS.gov Account Services
Reconstructed example for educational purposes. Not a verbatim reproduction.
Scam email subject line variants
- •Action Required: Verify your IRS account
- •Your IRS online account needs verification
- •IRS: Unusual activity detected on your account
- •Important: IRS account security alert
- •Verify your IRS.gov account immediately
5 red flags
IRS Dirty Dozen 2026 #1: IRS explicitly names this as the top email threat
IRS reported 600+ social media impersonators using this approach in fiscal 2025
QR codes in IRS emails are always fraudulent — the IRS never uses QR codes in emails
Clicking links may install ransomware — IRS Dirty Dozen 2026 specifically warns of this
The IRS never sends unsolicited emails about your account
What to do
Do not click any link or scan any QR code
IRS online accounts are only managed at IRS.gov — type the URL directly
Forward as attachment to [email protected]
Report to TIGTA at tigta.gov/report-scam
Report this email scam
Source
IRS Dirty Dozen 2025 #1 — email phishing (irs.gov); IRS Dirty Dozen 2026 #1 — IRS impersonation by email and text with QR codes
https://www.irs.gov/newsroom/dirty-dozen-tax-scams-for-2026-irs-reminds-taxpayers-to-watch-out-for-dangerous-threats ↗Fake sender domains used in this scam
Scammers impersonate legitimate brands using these fraudulent domains. If you received an email from one of these, it is a scam.
Related scam email patterns
People also search for
Frequently asked questions
Is an email with subject "Action Required: Verify your IRS account" a scam?▼
IRS Dirty Dozen 2025 and 2026 list this as the #1 email scam. In 2026, these emails increasingly include QR codes directing to fake IRS websites. The IRS reported over 600 social media impersonators in fiscal 2025 using similar tactics.
What does this scam email say?▼
Email appears to come from IRS.gov with alarming subject line about account verification. Body uses official IRS branding and may include a QR code or link to a fake IRS website. In 2026, some variants install malware or ransomware when links are clicked. The IRS Dirty Dozen 2026 specifically warns …
What should I do if I received this email?▼
Do not click any link or scan any QR code IRS online accounts are only managed at IRS.gov — type the URL directly Forward as attachment to [email protected]
Who does this email pretend to be from?▼
This scam impersonates: Internal Revenue Service, IRS Security Team, IRS.gov, U.S. Treasury Department. IRS Dirty Dozen 2026 #1: IRS explicitly names this as the top email threat
Received a suspicious email?
Paste the email text or subject line — check it instantly, free.
Check your email →Source: IRS Dirty Dozen 2025 #1 — email phishing (irs.gov); IRS Dirty Dozen 2026 #1 — IRS impersonation by email and text with QR codes
First documented: 2023 · Last active: 2026-03
← Scam message database