IRS Warns of Fake Crypto Tax Letters-New 1099-DA Rules Make the Scam More Dangerous

Why this fake IRS crypto mail matters now

The IRS says scammers are mailing fake compliance letters that direct crypto holders to a fraudulent website designed to resemble IRS.gov. The page prompts victims to enter wallet details, exchange credentials, and, in separate warnings, wallet recovery phrases, private keys, or financial information.

New 1099-DA rules make the lure more credible

The scam works because the underlying reporting rules are real. Form 1099-DA applies starting with the 2025 tax year, and Form 1099-DA is live for the first time in 2026. With the first Form 1099-DAs must be filed by March 31, 2026, some taxpayers now have a legitimate reason to expect communication about crypto reporting. That makes this threat more urgent than a routine phishing email.

The safe default in the next few weeks

Treat any unsolicited tax mail that asks you to scan a code or click a link as malicious until you can verify it through a trusted channel. If one arrives, do not scan the QR code and do not enter any wallet or exchange information on the linked page.

What gives the fake letter away

The pressure feels real because broker reporting is still settling into the 2026 filing cycle. The first Form 1099-DAs must be filed by March 31, 2026, yet some users have been told their forms may not be available until March 18th or later. Add IRS guidance on the digital assets question, and it is easy to see why people worry about reporting digital asset transactions before they know what brokers have already reported.

The clearest red flags

• The mailer contains a QR code that goes to a fraudulent website designed to resemble IRS.gov, sometimes presented as a fake Digital Asset Compliance Portal.
• The page asks for cryptocurrency wallet details and exchange credentials, plus wallet recovery phrases, private keys, or financial information.
• It pushes you to "resolve compliance" through the letter instead of directing you to sign in yourself on a known exchange or IRS website.

If those signals are present, stop. Do not wait for proof before treating the mailer as hostile.

Verify through your own keyboard

Real tax processes let you start from channels you already trust. For IRS guidance, go directly to the official IRS site and use the pages on the digital assets question and how to report digital asset transactions. If you are waiting on broker reporting, check status through known exchange portals, not through any link or QR code in the mailer.

What to do if you receive the letter

The next step is practical. If a letter arrives, do not touch its link or QR code. The IRS has warned these mails lead to a fraudulent website designed to resemble IRS.gov and are designed to steal wallet details and exchange credentials. Your first job is to break the attack chain before anything is clicked.

If you already interacted with the page

• Change your exchange passwords immediately.
• Enable strong authentication on exchanges and email.
• Contact the relevant cryptocurrency exchanges or financial institutions to secure accounts and flag possible exposure.
• Report the incident as soon as possible.

This remains dangerous through filing season because the pressure has not passed. The new broker-reporting rollout is still marked by widespread reporting delays, and taxpayers still need to understand how to answer the digital assets question and report related transactions. Treat any unsolicited tax mail as malicious until you can confirm it through channels you already trust.