Skip to content
Submit incident
AII-1001-84339
ReportedReported by fewer than three independent publishers, with no official finding.

AI-Generated Imposter IRS Websites Used in Tax Scams Against U.S. Taxpayers

Cybersecurity experts report a surge in AI-generated tax scam websites and phishing emails impersonating the IRS to defraud U.S. taxpayers before Tax Day, with scammers using artificial intelligence to create increasingly realistic imposter sites, emails, and text messages. Guardio found a 77% increase in tax-related phishing scams in 2025, and McAfee data shows the average victim lost $8,199 in 2024.

14 March 2025 Β· Internal Revenue Service Β· Fraud, scams and manipulation
14 March 2025
AII-1001-84339View source β†—
Quick facts
Category
Fraud, scams and manipulation
Country
United States
Source
cbsnews.com
Date
14 March 2025
Drafted by
Raidu Incident Detection

What happened

Cybersecurity firm Guardio tracked a 77% increase in tax-related phishing scams in 2025. Guardio's Karin Zilberstein said scammers are increasingly using artificial intelligence to create realistic imposter websites and emails that impersonate the IRS.

Scammers use AI-generated websites and phishing texts to steal personal information and financial data from taxpayers. Common scams include imposter IRS text messages asking for personal information to receive economic impact payments, with links to fake websites. Scam preparers also set up fake websites to steal information, while 'ghost preparers' refuse to sign returns as required by law.

Reported impact

The average tax scam victim lost $8,199 in 2024, according to McAfee. Security software company DNSFilter found that traffic to malicious domains with 'tax' in the name peaked 30 days before Tax Day in 2024.

Index analysis

According to Guardio's Karin Zilberstein, AI has increased the quality of scams by making them look more real, with more eloquent language, realistic links, and website visuals that precisely imitate legitimate IRS branding. Scammers evade detection by using domains ending in .org, .com, or other extensions instead of the official .gov domain used by the IRS.

Governance controls

The IRS warns it will never threaten legal action, promise a refund, demand payment through text or email, or call and ask for credit or debit card information over the phone. The IRS advises taxpayers that legitimate economic impact payments require no action from eligible recipients and warns to verify the credentials of tax preparers, including their IRS Preparer Tax Identification Number (PTIN).

Classification

Category
Fraud, scams and manipulation
Industry
Financial and insurance services
Country
United States
Harm status
Actual harm
Intent
Intentional
Timing
Unknown
Harm types
Economic or property
Harmed
Consumers, General public
Failure modes
Fabricated citation
AI systems
AI-generated imposter website and email creation tools

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

cbsnews.com
AI-Generated Imposter IRS Websites Used in Tax Scams Against U.S. Taxpayers