{"id":397,"date":"2026-02-01T10:49:01","date_gmt":"2026-02-01T16:49:01","guid":{"rendered":"https:\/\/www.wisconsin.edu\/information-security\/?p=397"},"modified":"2026-04-30T12:11:47","modified_gmt":"2026-04-30T17:11:47","slug":"tax-season-scams-irs-impersonation-targeting-higher-education","status":"publish","type":"post","link":"https:\/\/www.wisconsin.edu\/information-security\/2026\/02\/01\/tax-season-scams-irs-impersonation-targeting-higher-education\/","title":{"rendered":"Tax Season Scams: IRS Impersonation Targeting Higher Education"},"content":{"rendered":"\n<p>Tax season always brings a spike in scams. This year is no exception. IRS impersonation remains one of the most common and financially damaging tactics.<\/p>\n\n\n\n<p>Nearly 1 in 4 Americans (23%) say they or someone they know has lost money to a tax scam, according to McAfee&#8217;s 2025 tax season survey. During Fiscal Year 2024, the IRS Criminal Investigation identified more than 9.1 billion dollars in fraud related to tax and financial crimes.<\/p>\n\n\n\n<p>In McAfee&#8217;s 2025 tax season survey, nearly half of respondents reported encountering tax-related scam messages. Industry research has reported a dramatic increase in phishing emails leveraging generative AI tools, with some reports showing an increase of more than 1,200 percent year over year. The result is simple: scam emails look more professional and more convincing than ever.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">The Core Rule<\/h3>\n\n\n\n<p>The IRS does not initiate contact with taxpayers by email, text message, or social media. Initial contact is typically made through official U.S. Mail.<\/p>\n\n\n\n<p>If you receive an unsolicited email, text message, or social media message claiming to be from the IRS, treat it as a scam. Verify by going directly to IRS.gov or calling the official IRS number.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Refund Phishing Emails<\/h3>\n\n\n\n<p>You receive an email stating that you are owed a refund. The message looks official. It may include official-looking logos, formal language, and a deadline. It asks you to click a link to verify your identity or claim your refund.<\/p>\n\n\n\n<p>AI-Generated Email Example:<\/p>\n\n\n\n<p><em>From: IRS Tax Services <a href=\"mailto:refunds@irs-gov.com\">refunds@irs-gov.com<\/a> Subject: Action Required: Your $1,847 Federal Refund is Ready<\/em><\/p>\n\n\n\n<p>Dear Taxpayer,<\/p>\n\n\n\n<p class=\"has-text-align-left\"><em>Our records indicate that you are eligible for a federal tax refund of $1,847.00. To process this refund, we need you to verify your identity through our secure portal.<\/em><\/p>\n\n\n\n<p class=\"has-text-align-left\"> <em>Click here to claim your refund: [malicious link]<\/em><\/p>\n\n\n\n<p class=\"has-text-align-left\"> <em>Failure to respond may delay your refund. This offer expires in 48 hours.<\/em><\/p>\n\n\n\n<p class=\"has-text-align-left\"><em>Internal Revenue Service<\/em><\/p>\n\n\n\n<p>The email may appear professional and free of obvious grammatical errors. Industry reporting indicates that scammers are increasingly leveraging generative AI tools to produce more polished content. Professionalism is part of the deception.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Student Loan Forgiveness Scams<\/h3>\n\n\n\n<p>Scammers are exploiting ongoing conversations about student loan relief. They may claim they can secure immediate loan forgiveness for a fee. Some pose as affiliates of the Department of Education.<\/p>\n\n\n\n<p><strong>Red flags include:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Requests for upfront processing fees <\/li>\n\n\n\n<li>Requests for your FSA ID and password <\/li>\n\n\n\n<li>Requests for bank account information for &#8220;verification&#8221;<\/li>\n<\/ul>\n\n\n\n<p>Legitimate federal student loan programs do not charge upfront fees. Official information is available at StudentAid.gov.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Aggressive Phone Scams<\/h3>\n\n\n\n<p>Scammers place calls to individuals claiming to be IRS agents. The caller states that back taxes are owed and threatens arrest, deportation, or license suspension unless immediate payment is made. Payment is often requested through gift cards, wire transfers, or cryptocurrency.<\/p>\n\n\n\n<p>Caller ID may display &#8220;IRS&#8221; or a Washington, D.C. area code. Scammers can falsify caller ID information through a tactic known as spoofing.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Protective Steps<\/h3>\n\n\n\n<p>Pause before clicking links in any unsolicited message about taxes, refunds, or student loans. Remember the core rule: the IRS does not initiate contact with taxpayers by email, text message, or social media. Initial contact is typically made through official U.S. Mail. Any unexpected message claiming to be from the IRS through email, text, or social platforms should be treated as a scam, no matter how professional it looks.<\/p>\n\n\n\n<p>If you receive an unexpected message about taxes, do not use the contact information provided in that message. Instead, go directly to IRS.gov or call the official IRS number at 1-800-829-1040. For university-related tax matters, contact UW System Administration Human Resources or your campus HR office through official channels<\/p>\n\n\n\n<p><strong>Never provide:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Social Security numbers by email <\/li>\n\n\n\n<li>Bank account information to unsolicited callers <\/li>\n\n\n\n<li>Gift card numbers for tax payments <\/li>\n\n\n\n<li>FSA IDs or passwords to third parties<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Reporting<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Forward suspected IRS phishing emails to <a href=\"mailto:phishing@irs.gov\">phishing@irs.gov<\/a> <\/li>\n\n\n\n<li>Report phone scams to the Treasury Inspector General at 1-800-366-4484 <\/li>\n\n\n\n<li>If a university email account receives a suspicious message, report it to the UWSA Office of Information Security or your campus IT service desk.  The sooner it&#8217;s reported, the easier it is to contain. You can find contact information for your campus help desk here: <a href=\"https:\/\/kb.wisc.edu\/helpdesk\/5427\">Universities of Wisconsin (UW System) &#8211; IT Help Desks Contact Information<\/a>.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\">Bottom Line<\/h3>\n\n\n\n<p>These scams depend on urgency. The message pressures you to act immediately.<\/p>\n\n\n\n<p><strong>Slow down. Verify independently. If the IRS needs to reach you, initial contact is typically by mail.<\/strong><\/p>\n\n\n\n<p>If something feels questionable, verify through official channels. It is better to confirm than to recover from identity theft or financial loss.<\/p>\n\n\n\n<p>Stay safe during this tax season.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Tax season always brings a spike in scams. This year is no exception. IRS impersonation remains one of the most common and financially damaging tactics. Nearly 1 in 4 Americans [&hellip;]<\/p>\n","protected":false},"author":6587,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33,21,27,25,32],"tags":[],"class_list":["post-397","post","type-post","status-publish","format-standard","hentry","category-faculty-staff-awareness","category-phishing","category-scam-awareness","category-social-engineering","category-student-awareness"],"publishpress_future_action":{"enabled":false,"date":"2026-06-22 23:51:27","action":"change-status","newStatus":"draft","terms":[],"taxonomy":"category","extraData":[]},"publishpress_future_workflow_manual_trigger":{"enabledWorkflows":[]},"_links":{"self":[{"href":"https:\/\/www.wisconsin.edu\/information-security\/wp-json\/wp\/v2\/posts\/397","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wisconsin.edu\/information-security\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wisconsin.edu\/information-security\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wisconsin.edu\/information-security\/wp-json\/wp\/v2\/users\/6587"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wisconsin.edu\/information-security\/wp-json\/wp\/v2\/comments?post=397"}],"version-history":[{"count":2,"href":"https:\/\/www.wisconsin.edu\/information-security\/wp-json\/wp\/v2\/posts\/397\/revisions"}],"predecessor-version":[{"id":681,"href":"https:\/\/www.wisconsin.edu\/information-security\/wp-json\/wp\/v2\/posts\/397\/revisions\/681"}],"wp:attachment":[{"href":"https:\/\/www.wisconsin.edu\/information-security\/wp-json\/wp\/v2\/media?parent=397"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wisconsin.edu\/information-security\/wp-json\/wp\/v2\/categories?post=397"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wisconsin.edu\/information-security\/wp-json\/wp\/v2\/tags?post=397"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}