IRS Warns of Scam Letters with QR Codes Targeting US Crypto Holders

A new mail fraud scheme is targeting cryptocurrency holders in the US, using convincing IRS-style notices and fake QR codes to direct recipients to a fraudulent website.

The scam involves official-looking letters that tell recipients to register for a 'Digital Asset Compliance Portal', which does not exist. The letters contain a QR code that leads to an imitation website asking for personal and financial details, including crypto exchange account information and wallet data.

Once the recipient submits this information, a follow-up call may be made from someone posing as an IRS official, requesting sensitive information such as a password, two-factor authentication code, or private key for the victim's crypto account.

The IRS has warned that no legitimate Digital Asset Compliance Portal exists and that any message referring to one should be reported. The agency's Criminal Investigation Chief, Jarod Koopman, stated that 'Criminals continue to exploit public trust in government agencies by creating convincing fake websites and official-looking correspondence.'