A text says a taxpayer’s IRS account is locked. A letter promises a bigger refund than expected. The IRS says both are bait, and it is warning taxpayers about them as filing season approaches. Its other advice is a six-digit Identity Protection PIN, a number that keeps anyone else from filing under a taxpayer’s Social Security number.
The warning came in an Oct. 2 release for Cybersecurity Awareness Month. The IRS gave no dollar figure for losses. What it described is the pattern: a message that looks official, a reason to hurry and a request for personal details.
The lures the IRS named
In release IR-2026-119, the IRS says scammers pose as the IRS and other trusted groups by mail, email, text, social media and phone. Common hooks include a promise of a larger refund, a claim that an account is locked, a demand for immediate payment and links to fake websites.
IRS Chief Executive Officer Frank J. Bisignano said in the release that “criminals continue to look for new ways to steal taxpayer information and exploit trusted partnerships.” The agency’s basic advice is not to click links, open attachments or reply to unexpected messages that claim to come from the IRS.
The other steps it lists are ordinary ones: strong, unique passwords, multifactor authentication, regular software updates and avoiding public Wi-Fi for financial accounts. Suspicious tax-related messages can be reported at IRS.gov/SubmitATip.
How the IRS really makes contact
The IRS says it normally makes first contact by mail. It sends email or text only to people who opted in, and it never sends direct messages through social media. A separate IRS page on how to know it’s the IRS says a social media direct message “is never from us.”
That page lists the warning signs: contact that comes unexpectedly, pressure to act fast, threats, requests for personal or financial information and demands for immediate payment. The IRS or private collection agencies may call about an account. The release says the IRS will never call to demand immediate payment, threaten arrest or say a refund is owed.
For anyone holding a text about a locked IRS account, the question is what to do instead of replying. The IRS answer is to skip the link and sign in to a verified account, or wait for a letter. A message that cannot be matched to a mailed notice has no claim on a taxpayer’s attention.
What changed this year: Social Security and Medicare change every year, and nobody sends you a memo. The Retirement Money Brief breaks down what changed and what to do. Bonus when you subscribe: our Scam & Identity-Theft Action Card.
Get the Brief and the scam action card →
We may earn a commission from links on this page.
What the Identity Protection PIN does
The release describes an Identity Protection PIN as “a six-digit number that helps prevent someone else from filing a federal tax return” using a taxpayer’s Social Security number or individual taxpayer identification number. The details are on the IRS page that explains how to get an IP PIN.
A new PIN is generated each year and is generally viewable online from mid-January through mid-November. People who enroll through an online account have to look it up themselves, because no notice is mailed. The PIN goes into tax software or to a tax professional when a return is filed.
A return filed without the right PIN is rejected if e-filed and delayed if mailed on paper. That is the whole protection. A thief who has a Social Security number but not the PIN cannot get a return through the normal door.
Three ways to get a PIN
Anyone with a Social Security number or taxpayer identification number who can verify identity is eligible, the IRS page says. The fastest route is an online account. Parents and guardians can request a PIN for a dependent, and anyone under 18 must use another route.
Taxpayers who cannot set up an online account can file Form 15227 if their adjusted gross income on the last filed return was below $84,000 for an individual or $168,000 for married couples filing jointly. The IRS calls to verify identity, and the PIN comes by mail, usually within four to six weeks.
The third option is an appointment at a Taxpayer Assistance Center with one federal or state photo ID and one more form of identification. The PIN then arrives by mail, usually within three weeks. Mail and in-person routes take longer than the online account.
The one request that is always a scam
The IRS page is blunt on one point: “The IRS will never ask for your IP PIN.” Phone calls, emails or texts that ask for it are scams, and the PIN should not be shared with anyone. That includes a caller who says the account is locked and needs the number to unlock it.
The open question for anyone worried about identity theft is how to stop a scammer from filing a return in their name. The PIN answers it for the federal return only. It does not touch a bank account or a credit file, which is why the IRS pairs it with strong passwords and multifactor sign-in on every account that holds a Social Security number.
Would a locked-account text catch anyone off guard this filing season?
A scammer who files first with a stolen Social Security number can hold up a refund for months, and the victim finds out only when the real return is rejected. The first hour after a bad call or click is when most of the damage can still be contained.
The Senior Fraud Defense & First-Hour Recovery Kit lays out that hour step by step. It includes the first-hour recovery plan, the free credit-freeze steps and a fraud evidence and report log, so each call and report is written down as it happens.
Get the First-Hour Recovery Kit’s plan and report log →
More Financial Reading
- 21 Ways to Stretch a $2,087 Social Security Check
- 15 Places to Find Your Share of the $4.25 Billion States Give Back
- 21 Ways Retirees Can Raise $1,000 Fast Without a Job
This article was produced with the assistance of AI and reviewed by the editorial team.
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
