untrappable

IRS refund email scam: is that refund notice real?

Editorially reviewed · Last updated June 16, 2026

Yes — this is a scam. The IRS never emails you about a refund — and the real irs.gov never sends from a hyphenated look-alike like "irs-gov-tax.example."

Action required: your $1,284.50 federal refund is pending
I
Internal Revenue Service
refunds@irs-gov-tax.example
8:02 AM
Our records show you are eligible for a tax refund of $1,284.50. To receive your payment, verify your information within 24 hours or your refund will be cancelled: irs-refund-verify.example/claim
Claim my refund
The Email, as received

Other versions you might get: A fake "tax transcript" or "stimulus payment" email, a text or call claiming you owe back taxes, or a notice threatening arrest unless you pay with gift cards.

What to do right now

  1. Don't click the link or button, and don't call any number in it. Don't enter your Social Security number, bank, or login.
  2. Check the real source. Type irs.gov yourself and look up your refund at irs.gov/refunds — there won't be a surprise refund waiting.
  3. Report it. Forward the email to phishing@irs.gov, then file at reportfraud.ftc.gov.
  4. Delete it and mark it as phishing.
  5. If you already tapped or shared details: change any password you entered, call your bank if you gave card or account info, and place a free fraud alert with the credit bureaus. If you shared your SSN, see the recovery steps below.

How to make sure it never bites you

These emails land because your address is on breached lists, and a leaked SSN can be reused for fake returns and new-account fraud. Reduce the blast radius — see how to lock down your accounts.

A public service

Help protect someone else

Scams spread because people stay quiet about them. If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. Passing it on is the easiest good thing you'll do today. It's safe to forward, and stands on its own as a record for a bank or the police.