IRS Warns Cryptocurrency Holders of New Scam Targeting Digital Assets
A new cryptocurrency scam is targeting holders of digital assets, with malicious actors sending fake physical letters from the IRS. The letter instructs recipients to scan a QR code to register for a non-existent Digital Asset Compliance Portal (DACP), which is actually a phishing front.
According to Coinbase and Dark Tower's investigation, once users scan the QR code, they are taken to a malicious website that collects personally identifiable information, including cryptocurrency exchange account details. The scammers use this information to launch targeted phishing attacks or steal funds by transferring them to their own accounts.
The IRS has warned cryptocurrency holders about the scam through an official press release, advising them not to scan suspicious QR codes and be cautious of unsolicited letters from unknown senders. Coinbase and the IRS recommend that users do not click on suspicious links received via emails or messages from unknown senders and never enter personal information on unverified websites.
The scam is relatively easy to avoid by being aware of official communication methods used by the IRS, which typically involve mail notices and never ask for information about cryptocurrency exchange accounts. If you've already shared sensitive information with unknown parties, contact your exchange's support team immediately and report the fraud to the IRS and FTC.