IRS Warns of Fake Crypto Compliance Letters in Mail

The Internal Revenue Service has issued a formal warning regarding a new wave of physical mail scams targeting cryptocurrency holders. These fraudulent letters claim to be official compliance notices, but they are designed to lead victims to a fake portal that harvests sensitive information and drains digital wallets.

The scam uses official looking branding and a QR code to lure victims onto a malicious website. The IRS confirms that it does not operate a Digital Asset Compliance Portal, and any letter asking you to register your account information is part of an identity theft attempt. Security experts note that these letters often reference a wide range of tax years to appear legitimate.

This campaign marks a shift toward physical mail as a way to trick investors. Beyond the fake letters, attackers are also using voice phishing tactics, where they call victims and pose as support staff to gain access to private account keys. Once they have a target on the phone, they attempt to convince the victim to move their funds to a wallet controlled by the scammer.

Security firms highlight that scammers are moving away from complex code exploits and are focusing more on human manipulation. To stay safe, ignore any unsolicited letters or texts regarding tax compliance. Never scan QR codes from unknown sources, and be wary of anyone claiming to be tax or tech support who asks you to move your crypto to a new wallet.