Fake IRS Crypto Letters Are Targeting Cryptocurrency Holders

There is a new IRS scam targeting cryptocurrency holders, and this one is more convincing than the usual phishing email.

The scam arrives as an official-looking letter claiming that you must register through an IRS “Digital Asset Compliance Portal.” The letter includes a QR code that sends you to a website designed to look like IRS.gov.

There is just one problem: the Digital Asset Compliance Portal does not exist.

IRS Criminal Investigation issued a fraud alert on July 30, 2026, specifically warning cryptocurrency holders about these fake letters. If you receive one, do not scan the QR code, enter account information, or move any digital assets.

What Is the Digital Asset Compliance Portal Scam?

The fake letter tells the recipient that some type of action is required involving cryptocurrency or digital assets. It then directs the taxpayer to scan a QR code and register through what appears to be an IRS compliance website.

That website is fraudulent.

According to IRS Criminal Investigation, the fake site may ask for personal information, cryptocurrency wallet information, exchange account credentials, or other sensitive information.

That is what makes this scam particularly dangerous. The letter may not start by asking you to send Bitcoin somewhere. Instead, it tries to convince you that you are simply completing an IRS compliance requirement.

Once scammers have your exchange credentials, wallet information, passwords, private keys, or recovery phrase, the consequences can be much more serious.

How Can You Tell if an IRS Crypto Letter Is Fake?

Start with the simplest rule:

The IRS does not have a Digital Asset Compliance Portal.

If a letter tells you to register for one, the IRS has already answered the question. It is a scam.

Other warning signs include a communication that:

Tells you to scan an unsolicited QR code to access an IRS portal.

Asks for cryptocurrency private keys, wallet recovery phrases, passwords, or exchange login credentials.

Tells you to move cryptocurrency to a “secure,” “protected,” or government-controlled wallet.

Pressures you to act immediately before you have time to verify the request.

Threatens arrest or other immediate consequences unless you pay or take action.

Demands unusual payment methods such as gift cards.

The common thread is not simply that the communication sounds scary. Real IRS notices can certainly be serious.

The difference is process.

A legitimate IRS communication gives you a way to understand the issue, verify the notice, and respond. A scam tries to create enough urgency that you act before verifying who is actually contacting you.

Does the IRS Really Send Letters About Cryptocurrency?

Yes. This is an important distinction.

The fact that a letter mentions Bitcoin, cryptocurrency, or digital assets does not automatically make it fraudulent. The IRS has legitimate digital asset reporting requirements and can contact taxpayers about tax issues involving cryptocurrency.

That is part of what makes this scam effective.

If you have traded cryptocurrency, you may already be concerned that the IRS received information from an exchange or identified something on your tax return. Scammers are taking advantage of that uncertainty.

So do not automatically ignore every IRS-looking letter involving cryptocurrency.

Verify it.

How Does the IRS Normally Contact Taxpayers?

The IRS normally makes its first contact with a taxpayer through a letter delivered by the U.S. Postal Service.

But a physical letter is not proof that the IRS sent it.

Scammers can reproduce letterhead, formatting, case numbers, barcodes, QR codes, and other details that make a document look official.

Many legitimate IRS notices have a notice or letter number that you can check against information on IRS.gov. You can also review your IRS Online Account and use contact information obtained independently from IRS.gov instead of relying on a phone number, website, or QR code printed on a suspicious letter.

There is also some nuance around electronic communication. The IRS can use email, text messages, or phone calls in limited situations, including when a taxpayer has opted in or when contact relates to an existing matter.

But an unexpected communication that rushes you, threatens you, demands immediate payment, or asks for sensitive financial information should immediately raise your suspicion.

The IRS also states that it does not send taxpayers direct messages through social media.

What Should You Do if You Receive a Suspicious IRS Crypto Letter?

First, do nothing with the QR code.

Do not scan it “just to see where it goes.” Do not call the phone number or use the website on the letter until you independently verify that the communication is legitimate.

Instead, verify the notice through IRS.gov, your IRS Online Account, or a tax professional experienced in IRS matters.

If the letter is fraudulent, preserve it rather than immediately throwing it away. IRS Criminal Investigation asks taxpayers to report suspicious communications so investigators can identify and shut down these schemes.

If you already provided credentials or sensitive information, act quickly. Change affected passwords, contact the cryptocurrency exchange or financial institution involved, enable multifactor authentication where available, preserve the letter and any screenshots, and report the incident.

The Easiest Filter for Spotting an IRS Scam

Here is the filter I would use:

A real IRS notice gives you a process. A scam gives you urgency.

A legitimate notice explains the issue and gives you some method of verifying or responding to it.

A scammer wants to shorten the time between fear and action.

That is especially dangerous when cryptocurrency is involved. If someone gains access to an account, private key, or recovery phrase, recovering those assets may be extremely difficult.

If you receive an IRS notice involving cryptocurrency and you are not sure whether it is legitimate, verify it before responding.

At Refuge Financial Services, I help taxpayers review IRS notices, understand what the IRS is actually asking for, and determine the appropriate next step. As an Enrolled Agent, I regularly work with taxpayers dealing with IRS issues and confusing government correspondence.

When a letter involves your money, your identity, or your cryptocurrency, verification should come before urgency.