IRS Warns of Sophisticated Phishing Campaign Targeting Cryptocurrency Holders
The US Internal Revenue Service (IRS) has warned cryptocurrency holders about a sophisticated phishing campaign that impersonates the tax agency through fake compliance letters. The letters, which contain QR codes directing recipients to a fraudulent website, prompt victims to disclose personal information and cryptocurrency wallet details.
The IRS advised recipients not to scan QR codes contained in unsolicited communications or disclose wallet recovery phrases, private keys, or financial information. Individuals who believe they have been targeted were urged to secure affected accounts, contact relevant financial institutions or cryptocurrency exchanges, and report the incident.
The campaign was identified through cooperation between Coinbase, cybersecurity firm DarkTower, and the IRS. Investigators traced the phishing domain to a Hong Kong-based registrar and found that it had been registered shortly before the letters were distributed.