
The IRS Criminal Investigation unit said fake paper letters with QR codes are targeting crypto holders to steal data and digital assets. Here is how to spot the scam and protect yourself.
The IRS Criminal Investigation unit has warned cryptocurrency holders about a phishing scheme that uses official-looking paper letters to steal personal data and digital assets. The letters instruct recipients to enroll in a fake Digital Asset Compliance Portal, which the IRS confirmed does not exist.
Each letter contains a QR code. Scanning it takes the recipient to a spoofed IRS website designed to harvest login credentials. In some cases, the site may trick people into initiating direct transfers of their crypto to the scammers, the agency said.
The IRS has been sending legitimate educational compliance letters since 2019 to people who may have underreported digital asset activity. More than 10,000 taxpayers received those letters. The agency has stepped up enforcement around crypto reporting, which makes the fake compliance portal feel plausible to someone who gets unexpected mail from the IRS.
The IRS is direct about what it does not do. It does not send QR codes in official correspondence. It does not ask taxpayers to transfer digital assets as part of any compliance process. It does not operate a digital asset enrollment portal. Any legitimate notice can be verified through IRS.gov or by calling the number listed on that site, the agency said.
The scam erodes trust in real IRS communications about crypto compliance at a time when the agency is actively increasing enforcement. If people become wary of all IRS mail, they might ignore legitimate notices, potentially leading to penalties or missed opportunities to correct filings.
The IRS Criminal Investigation unit advised anyone who receives such a letter to ignore the QR code and not call any number listed in the letter. Instead, check their account status through the IRS's own tools.
The warning comes as the IRS continues to expand its crypto reporting requirements, including new broker reporting rules set to take effect in 2026. The agency said it is working to educate taxpayers on how to identify legitimate correspondence.
Drafted by a large language model from the source reporting linked above, then screened by automated publishing checks. It is not read by a journalist before publication. Some articles cite our Alpha Score. Verify prices and figures against the original source. Educational coverage, not personalized advice.