Tax season has become a high-stakes battleground for cybercriminals, who leverage advanced technologies like deepfake audio and AI-generated phishing campaigns to steal over $10,000 from unsuspecting victims.
According to a 2025 McAfee survey, 10% of tax scam losses exceeded $10,000, with Gen Z adults (18–24) reporting the highest exposure to fraudulent attempts.
Meanwhile, the IRS’s annual Dirty Dozen list highlights sophisticated schemes such as overstated withholding credits and spear phishing attacks targeting tax professionals, underscoring the evolving tactics used to exploit tax systems.
AI-Powered Deception Escalates Risks
Cybercriminals now deploy generative AI tools to create hyper-realistic phishing emails mimicking IRS communications or trusted tax services like TurboTax.
Researchers note that 87% of Americans fear AI’s role in making scams harder to detect, mainly through real-time deepfake audio impersonating IRS agents.
A 2023 incident involving a U.K. energy company demonstrated the severity of this threat. Attackers used AI-generated audio to mimic a CEO’s voice, resulting in a $243,000 wire fraud loss.
Tax scams often begin with urgent messages claiming refund rejections or unpaid taxes. These communications direct victims to counterfeit websites—many replicating IRS.gov or tax software portals to harvest Social Security numbers, bank details, or cryptocurrency wallet credentials.
For example, Form W-2 fraud surged in 2025, with scammers instructing taxpayers to fabricate income and withholding data using forms like 1099-NEC or 1099-R to claim illegitimate refunds.
High-Risk Targets and Tactics
Demographic Vulnerabilities
While Gen Z faces the highest scam attempt rates (40%), adults aged 45–54 suffer the steepest losses, with 10% losing over $10,000.
Older demographics (65–74) also remain vulnerable, with women in this group reporting $2,500–$5,000 losses.
Scammers exploit generational gaps: younger victims are often baited via social media links, whereas older adults face voice phishing (vishing) calls using deepfake audio to simulate family emergencies.
Prevalent Schemes in 2025
Fake IRS Communications: 48% of Americans received fraudulent IRS messages pressuring immediate action, often via spoofed emails citing “unclaimed refunds” or “penalties.”
Form 7202 Exploitation: Scammers misuse self-employed COVID-19 tax credits by submitting falsified wage data, triggering IRS refund holds.
Cryptocurrency Scams: Men are three times more likely to encounter fake crypto tax payment portals, where stolen keys enable direct asset theft.
Mitigation Strategies
The IRS emphasizes filing early to preempt identity thieves and verifying submissions using legitimate documents like employer-issued W-2s. Taxpayers should also:
- Monitor credit reports for unauthorized accounts linked to identity theft.
- Avoid clicking embedded links in unsolicited emails; instead, manually type IRS.gov or tax software URLs into browsers.
- Deploy AI-driven security tools like McAfee+ to block phishing attempts and scan for dark web data leaks.
As AI continues to refine cybercriminal tactics, taxpayers must adopt a skeptical stance toward urgent financial requests.
By combining early filing, multi-factor authentication, and advanced threat detection tools, individuals can mitigate risks in an increasingly adversarial digital tax landscape.
For those impacted, the IRS offers the Identity Theft Central portal to report fraud and initiate recovery protocols.
Collect Threat Intelligence on the Latest Malware and Phishing Attacks with ANY.RUN TI Lookup -> Try for free
