Fake IRS Letters And Hacked Senator Account Exploit Crypto Regulation Fears
Growing attention on cryptocurrency regulation has opened a new opportunity for scammers, who are now using tax compliance and trusted public figures to target digital asset holders.
Within hours of each other, the US Internal Revenue Service (IRS) warned of a phishing campaign involving fake compliance letters, while Senator Cynthia Lummis' X account was briefly hijacked to promote a fraudulent meme coin.
The separate incidents highlight how attackers are adapting their tactics by exploiting public concern over crypto rules and using trusted names to make their scams appear legitimate.
Fake IRS Letters Lead Victims To Fraudulent Crypto Portal
The IRS has warned cryptocurrency holders about counterfeit "Digital Asset Compliance" letters designed to steal personal information and digital assets.
The fraudulent notices, sent through the mail, direct recipients to scan a QR code that leads to a fake IRS website posing as a Digital Asset Compliance Portal.
Victims are told they must register before an urgent deadline or risk penalties, creating pressure to act quickly without verifying the request.
Once on the spoofed website, users are asked to provide sensitive details, including identification information and cryptocurrency wallet or exchange account credentials.
With enough personal and financial information collected, scammers can impersonate victims and gain access to their crypto holdings.
The IRS stressed that the Digital Asset Compliance Portal is not an official government platform.
It also reminded taxpayers that legitimate communications are generally sent through the US Postal Service and that the agency does not initiate contact through email, text messages or social media to request personal or financial information.
IRS Criminal Investigation Chief Jarod Koopman warned that criminals are increasingly taking advantage of public trust in government agencies.
"Criminals continue to exploit public trust in government agencies by creating convincing fake websites and official-looking correspondence."
The agency advised anyone receiving unsolicited messages or suspicious requests related to cryptocurrency compliance not to click links, scan QR codes or provide personal information.
Suspicious communications can be reported to the IRS through [email protected].
Why Crypto Investors Are Being Targeted
The scam takes advantage of growing awareness of cryptocurrency tax reporting and enforcement.
As regulators continue paying closer attention to digital assets, fraudsters are using fears of non-compliance to convince victims that immediate action is required.
The IRS noted that genuine tax notices include official notice numbers and provide instructions for responding or disputing claims.
It also warned taxpayers to be cautious of threats, demands for immediate payment, or requests involving cryptocurrency, gift cards or wire transfers.
Senator Lummis' X Account Used To Promote Fake Meme Coin
In a separate security incident, Senator Cynthia Lummis' X account was compromised for around five minutes and used to promote a newly created Solana-based meme coin called "USA."
The timing attracted attention because the senator, often referred to as the "Bitcoin Senator," has been advocating for the CLARITY Act, making the fake promotion appear more convincing.
However, many members of the crypto community quickly recognised the post as suspicious and warned others before it gained traction.
The fraudulent post was removed shortly afterwards, and no financial losses have been reported.
Together, the fake IRS campaign and the brief compromise of a prominent lawmaker's social media account show how cybercriminals are increasingly using regulation-related narratives and trusted identities to make cryptocurrency scams appear more believable.