I filled out a fake IRS tax refund form, what do I do now?
Last reviewed: 2026-08-01 · Checked with Hunch’s on-device engine, the same one inside the extension. How Hunch checks →
Part of our guide: What to do if you got scammed →
Take a breath. This is fixable, and acting quickly matters more than beating yourself up. The real IRS never texts or emails a link asking you to "verify your identity" to release a refund, and it never routes refunds through a lookalike site. If you typed your name, Social Security number, bank details, or card number into that form, treat it as exposed and move through the recovery steps below in order.
Got a message like this? Paste it here →
This scam targets anyone expecting money back at tax time, when a surprise "your refund is pending" message feels plausible and welcome. It works because the promise of cash lowers your guard, the 24-hour deadline rushes you past the domain check, and the IRS name borrows authority most people instinctively obey.
Illustrative example of the pattern, not a real message someone received.
How to verify it yourself
- Confirm the truth first: the IRS initiates most contact by physical mail, never demands you "verify identity" through a texted link to release a refund.
- Check your real refund status only at the official IRS site or app you type in yourself, never through a link someone sent you.
- Look at the domain that received your data: a host like irs-refund-verify.example is not irs.gov, and that mismatch alone confirms the form was fake.
- Assume everything you entered on that page is now in a stranger's hands, and prioritize the accounts tied to whatever you typed.
Common questions
is the IRS refund verification text real
No. Tax authorities don’t text or email links to “verify your identity” before a refund, they contact you by mail first. Any link demanding urgent verification is a phishing lure.
I entered my SSN on a fake IRS form what now
Treat your SSN as exposed: place a fraud alert or credit freeze with the three bureaus, file an IRS Identity Protection PIN request, and report at IdentityTheft.gov for a recovery plan.
how do I report a fake IRS tax message
Forward the message and sender details to [email protected], then report the fraud at reportfraud.ftc.gov. Reporting helps the IRS shut the lookalike site down.
can scammers steal my refund with my details
They can attempt to file a fraudulent return in your name or reroute your refund. Requesting an IRS Identity Protection PIN blocks anyone else from filing under your SSN.
If you already responded
- If you entered bank or card details, call your bank's real number on the back of the card now, freeze the card, and watch for unauthorized charges.
- If you entered your SSN, place a free credit freeze with Equifax, Experian, and TransUnion, and request an IRS Identity Protection PIN so no one can file under your name.
- Change the password on any account you reused those credentials for, and turn on two-factor authentication everywhere it is offered.
- Forward the scam message to [email protected], then report it at reportfraud.ftc.gov (and IdentityTheft.gov if your SSN or personal info was exposed).
- Stay alert for a follow-up "we can recover your refund" contact. That is a second scam targeting people who were just hit.
If you were already hit, expect a follow-up
One more thing to expect: after a scam, your details often land on lists that get reused, so you may be contacted again, sometimes by people posing as investigators, your bank's "fraud team," or "recovery agents" who promise to get your money back for an upfront fee. That follow-up is a second scam. No legitimate service charges a fee to recover funds.
Source: IRS, Report Phishing
Hunch is not affiliated with IRS. IRS is named only to describe a scam that impersonates it; the real IRS does not send these messages.