Fake IRS Tax Refund Text
If you received a text message that looks like an IRS tax refund text with a direct-deposit confirmation link, you are looking at one of the most repeated scam patterns of the year. These messages succeed because they impersonate something familiar and pile on urgency, pushing you to enter bank account information on a phishing page before you have time to verify with the real source.
The real IRS does not contact customers this way - and even when IRS does send you a legitimate notice, you can always confirm by logging into IRS.gov directly to check refund status instead of acting on the message itself. FakeOrLegit is not affiliated with IRS; this guide is independent consumer-safety information.
Below we walk through the warning signs you can check yourself, the exact steps to take if you have already engaged, and the most common follow-up questions we see in our checker.
Warning signs
- The sender is a long random number, an unrecognized short code, or an email-to-SMS address. Real organizations use their branded SMS short codes.
- The message contains a shortened or unfamiliar link. Hover or long-press to preview the full URL before tapping.
- Urgency or fear language pushes a deadline within 24 hours. Real organizations almost never time-bomb account actions that fast.
- There is a request for payment, login credentials, a verification code, or sensitive identifiers (SSN, full DOB, full card number). None of these are ever needed to resolve a legitimate notice.
- Spelling, grammar, or formatting is slightly off in places a real brand would catch. Scammers iterate but rarely match design systems exactly.
- The wording matches scam reports posted on Reddit's r/scams or in recent local-news headlines. A quick search of the exact phrase is one of the fastest checks you can do.
- The message references IRS but the link or sender is not on IRS's official domain. IRS-related actions should always be confirmed inside IRS's official app or website.
What to do
- Do not tap the link, even to look. Modern scam pages can fingerprint your device before you enter anything.
- In the US, forward the message to 7726 (SPAM). It is free and helps carriers shut down the sender.
- Run any link from the message through FakeOrLegit. The checker matches the URL against our heuristics and brand-impersonation database.
- If you already entered credentials, change the password and turn on two-factor authentication immediately. Sign out of all other sessions.
- If you already paid by credit card, dispute the charge with your bank within 60 days. Speed matters - earlier disputes win more often.
- Report to the FTC at reportfraud.ftc.gov. If you lost money, also file a local police report so an official case number exists.
- Watch for follow-up scams referencing the same IRS pretext. Scammers often re-contact under a "refund" or "support" persona within 24-72 hours.
FAQ
Run a check now
If a specific link or message triggered this guide, paste it for an instant risk report.
Related guides
Fake IRS Tax Owed Phone Call
The IRS never threatens arrest by phone. Here is the script and what to do.
Fake IRS Audit Letter
Fake IRS audit letters list a phone number that is not the IRS. Here is how to verify a real notice.
Fake Social Security Suspension Call
The SSA does not suspend Social Security numbers. Here is the robocall scam pattern.
Fake Social Security Benefits Suspended Text
Fake "your Social Security benefits will be suspended" texts impersonate the SSA. Here is what is real.
Medicare Card Replacement Scam
Fake Medicare card replacement calls and texts harvest Medicare numbers. Here is the pattern.
Disclaimer
FakeOrLegit provides automated risk signals based on publicly observable patterns. We do not guarantee that any site, email, or message is safe or unsafe. Always use your own judgment, and contact the real institution directly to verify any request before sharing personal or payment information.
FakeOrLegit is not affiliated with IRS. IRS did not send and does not endorse this analysis.