Kicking Off Our IRS Dirty Dozen Series: Don’t Click That “IRS” Email

Email Phishing Scams: Don’t Take the Bait

Every year, the IRS releases its Dirty Dozen list—a roundup of the top 12 scams targeting taxpayers, and 2025 is no exception. These schemes are clever, evolving, and designed to separate you from your money, identity, or peace of mind.

At Smith Patrick CPAs, we’re diving into each of these scams in a new blog series to help you stay one step ahead. First up: email phishing scams—the modern-day bait-and-switch, tax-style.

Just when you thought it was safe to check your inbox, along comes another phishing scam—dressed up like a tax refund, flashing urgent warnings, or offering too-good-to-be-true solutions for “unusual activity.” If you’ve ever found yourself squinting at a sketchy email and wondering, “Would the IRS really say that?”—the answer is a hard no.

According to the IRS’s 2025 “Dirty Dozen” list: phishing and smishing still made the cut.

Wait—Smishing?

Yes, it’s a thing. If phishing is a shady email pretending to be from the IRS, smishing is its text message cousin. These sneaky messages show up on your phone saying something like, “Your tax refund is waiting. Click here!” or “IRS alert: account on hold.” They’re designed to get you to click quickly—before you realize you’re being scammed.

How These Scams Work

Scammers use emails and texts that look legit, sometimes complete with IRS logos or official-sounding language. Their goal? To get you to hand over personal or financial info so they can file fake tax returns, steal refunds, or worse—install malware or ransomware that locks down your entire system.

Typical tactics include:

• Promising a fake tax refund
• Threatening legal action for fake tax fraud charges
• Urging you to “verify” information via shady links

These messages might appear convincing, but the real IRS won’t text you. They won’t email you out of the blue either—and they definitely won’t ask for sensitive information via a link.

What You Can Do

• Don’t click. If you didn’t ask for it, don’t open it.
• Report it. Forward phishing emails to phishing@irs.gov. Smishing texts can be reported to 7726 (SPAM).
• Stay alert. Use strong passwords, update your software, and be cautious with any communication related to taxes or money.

Still Not Sure?

If you ever have a tax-related question or you’re unsure whether that email is fishy or phishy, talk to someone who knows the real deal.

At Smith Patrick CPAs, we help clients steer clear of scams and stay on solid financial ground. Whether it’s tax prep, cybersecurity best practices, or just making sense of the latest IRS warning, we’re here to help—no suspicious links required.