
As the federal government shutdown continues into 2025, new IRS scams are spreading rapidly across the United States. Taxpayers, federal employees, and small businesses are being targeted by sophisticated phishing emails and text messages claiming to offer refunds or verify payments. Officials warn that confusion caused by the shutdown is creating ideal conditions for scammers to steal personal and financial information.
With many IRS services operating at limited capacity, scammers are capitalizing on delays and uncertainty. Messages designed to look official—often using IRS seals or email addresses that appear legitimate—urge recipients to “verify” their accounts or “restore access” to suspended services. According to the Internal Revenue Service, the agency never requests personal or financial information via email, text, or social media.
Phishing emails often feature alarming subject lines, such as “Shutdown Payment Alert” or “Action Required: Taxpayer Account Access.” Some include attachments or links to counterfeit IRS websites that appear secure, sometimes displaying a locked padlock icon. Once opened, these links can install malware or direct users to fraudulent forms designed to capture sensitive information, such as Social Security numbers or bank details.
“Tax deadlines and payment obligations remain unchanged during any government shutdown,” an IRS spokesperson said in a recent advisory. “Scammers use national events to create panic and trick people into sharing personal details or sending money.”
Phishing attacks have intensified as millions of Americans seek information about delayed refunds or government assistance programs. Fraudulent text messages, or “smishing,” now account for a large share of IRS-related scams. Victims report receiving urgent messages claiming their refund or federal account access has been suspended. The texts often include shortened URLs that lead to fake IRS login pages or data-harvesting sites.
“Any message requesting immediate payment or personal verification should be treated as a phishing attempt,” said the Treasury Inspector General for Tax Administration. The IRS has confirmed that it never initiates contact with taxpayers through text messages or direct messages on social media.
Social media has become another common platform for these attacks. Scammers impersonate government agencies or share posts advertising relief programs related to shutdowns. Many of these posts claim to offer emergency aid to federal employees or food bank vouchers, but they instead steal users’ information. The IRS warns that legitimate communication will always come through mailed letters or official .gov websites—not through social media accounts or online messages.
Identity theft remains one of the most damaging consequences of IRS scams during a government shutdown. Once scammers obtain enough personal or financial data, they can file fake tax returns, reroute refunds, or access taxpayer accounts. Victims often discover the fraud only after attempting to file their own returns and finding that someone has already claimed their refund.
“These scams don’t just target individuals—they also threaten businesses that handle taxpayer data or process federal payments,” cybersecurity analysts said in a joint statement with the IRS. Stolen information may be sold on illicit networks or used in future phishing attacks against employers and contractors tied to government work.
For federal employees and contractors who are not being paid during the shutdown, the financial risk is particularly high. Some scams offer false “relief payment” assistance, claiming recipients can qualify for temporary aid. The IRS emphasizes that no such program exists and advises workers to verify all claims independently through verified federal websites.
Taxpayers are advised to remain vigilant for warning signs of phishing attacks. The IRS recommends never clicking on links, downloading attachments, or sharing information in response to unsolicited messages. Any suspicious email or text should be deleted immediately and reported by forwarding it to phishing@irs.gov. Reports can also be filed with the Treasury Inspector General for Tax Administration by calling 800-366-4484.
Those who believe they have been affected by identity theft should review their IRS online account and contact the IRS Identity Protection unit for next steps. Official information about IRS operations, payments, and taxpayer services during the shutdown can always be verified directly at IRS.gov.
“Protect taxpayers, protect your data, and verify before you pay,” the IRS advisory stated. “Scammers use uncertainty to steal billions in taxpayer money every year. Awareness remains the best defense.”