Fraudsters are mailing counterfeit IRS CP53E notices with a QR code that asks the recipient to “verify” banking or identity information. The QR code leads to a phishing site built to steal personal and financial data.
Note: The IRS does include QR codes on some legitimate notices, so a QR code alone is not proof of a scam. Always verify a notice before scanning or paying.
How to verify a notice
Log in to your IRS Online Account at IRS.gov/account (type the address — don’t use a link or QR code from the notice). If the notice doesn’t appear in your account, treat it as suspicious. You can also forward it to our office and we’ll verify it for you.
If you receive one
- Don’t scan the QR code, click links, or call numbers on the notice until it’s verified.
- Don’t share personal, banking, or tax information.
- Send a copy to our office before responding.
How to report it
- Suspicious emails: forward as an attachment to [email protected], then delete.
- Suspicious texts: forward to 7726 (SPAM) and email a screenshot to [email protected].
- Fake mailed notices or impersonation calls: report to TIGTA at tigta.gov (also the FTC at reportfraud.ftc.gov for phone scams).
- Already shared information? Contact us right away so we can help with credit freezes, an IP PIN, and identity-theft steps.
When in doubt, send it to us before responding.
