Fake Crypto Letters Target Wallets with Fake Compliance Portal

The Internal Revenue Service (IRS) has issued a fraud alert about fake letters targeting cryptocurrency holders on July 30. The letters are designed to look official and direct recipients toward a fabricated compliance portal, where they will be asked for sensitive financial information.

The counterfeit portal may request personal details, wallet information, exchange credentials, recovery phrases, private keys, or other data capable of enabling theft. According to the agency, QR codes in the letters lead victims to websites built to resemble IRS.gov.

Criminals seek to capture sensitive financial information and exploit growing crypto tax anxiety. IRS-CI Chief Jarod Koopman warned: 'Criminals continue to exploit public trust in government agencies by creating convincing fake websites and official-looking correspondence.'

The operation's infrastructure was traced to a domain registered through a Hong Kong registrar, with the website hosted in Romania on a network previously associated with phishing pages impersonating financial institutions.