Alleged AI-Generated IRS Scam Websites Used to Defraud U.S. Taxpayers

Scammers have allegedly been using AI-generated imposter websites and phishing emails to impersonate the IRS. They have reportedly been tricking taxpayers into providing personal and financial information. There has been a reported surge in tax-related AI scams leading up to Tax Day 2025, with fraudulent domains mimicking IRS services, along with fake websites, emails, and text messages. The IRS has warned taxpayers to verify official sites and avoid unsolicited links.

Risk classification

• Primary risk domain: 4 Malicious actors
• Primary risk subdomain: 4.3 Fraud, scams, and targeted manipulation

The incident involves malicious actors using AI to generate highly realistic imposter websites and emails to defraud taxpayers and steal their financial assets.

Additional risk subdomains

• 2.1 Compromise of privacy by obtaining, leaking or correctly inferring sensitive information: The phishing campaigns specifically target taxpayers to steal their highly sensitive personal and financial information.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The risk is driven by human scammers who intentionally deploy generative AI tools post-deployment to create highly convincing phishing materials for financial gain.

EU AI Act risk tier

• Risk tier: 3 Limited Risk

Limited Risk: The AI systems are used to generate synthetic content (emails and website visuals) that mimic legitimate entities, which falls under transparency obligations for AI-generated content.

AI system and alleged parties

• AI system: unspecified
• AI purpose: Writing Assistant; Deepfake Image Generation
• Behaviour type: Tool
• Alleged developer: Unknown generative AI developers, Generative AI fraud tools, Black-box AI developers
• Alleged deployer: Unknown scammers, Scammers impersonating the IRS, Phishers, Cyber criminals
• Alleged harmed parties: U.S. citizens, Taxpayers in the United States, IRS, Identity theft victims, General public of the United States

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Substantial
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Minor, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Negligible, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Negligible, indirect Substantial
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Financial

Reported: The report explicitly describes financial losses, noting that the average tax scam victim lost $8,199 last year according to McAfee.

Indirectly caused: Taxpayers who fell victim to the scams suffered an average financial loss of $8,199 due to fraudulent tax filings or direct theft.

Inferred additional harm: Given the 77% increase in tax-related phishing scams in 2025 and thousands of victims annually, total financial losses are likely in the millions of dollars.

Malicious content

Reported: The report explicitly describes the creation of AI-generated imposter websites and phishing emails.

Directly caused: AI was used to generate highly realistic imposter websites and eloquent phishing emails mimicking the IRS to deceive taxpayers.

Inferred additional harm: It is likely that thousands of taxpayers were exposed to these AI-generated phishing emails and fake websites.

Privacy

Reported: The report explicitly describes scammers using phishing and fake websites to steal taxpayers' personal and financial information.

Indirectly caused: Taxpayers who fell victim to the AI-enhanced phishing scams had their sensitive personal and financial information stolen by scammers.

Inferred additional harm: It is likely that thousands of taxpayers had their personally identifiable information compromised due to these realistic AI-generated scams.

People affected

• Occurrences reported: 1
• People reportedly harmed: 2000
• People reportedly exposed: 10000

Potential causes

Technology

• AI-Generated Imposter Sites: AI precisely replicates official IRS website visuals.
• AI-Generated Phishing Emails: Generative AI produces highly eloquent scam emails.

Human Factors

• Inability to Spot AI Scams: Taxpayers cannot distinguish AI-eloquent text from real IRS emails.

Information quality

• Classification confidence: High
• Reason for confidence: The report clearly details the role of AI in enhancing tax scams by generating realistic emails and websites. While the specific AI models are not named, the mechanism of harm (phishing and financial fraud) and the scale of the threat are well-documented by cybersecurity firms like Guardio and DNSFilter.
• Ambiguities identified: The specific AI models or platforms used by the scammers are not identified.
• Alternative interpretations: None. The incident is a straightforward case of malicious actors leveraging AI tools for financial fraud.

Malicious actors are leveraging generative AI to execute highly convincing IRS-themed phishing scams, resulting in a 77% surge in tax-related cyber fraud. While causing notable financial losses to individual citizens and mimicking a federal agency, the incident represents a minor national security threat manageable through standard cybersecurity and law enforcement procedures.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Unknown

Threat characteristics

• Imminence: Long-term. The use of AI for phishing represents an ongoing, strategic cybercrime capability rather than an immediate national security crisis.
• Autonomy: Human-controlled. AI is used as a tool by human scammers to generate content; the scammers control the campaign deployment and execution.
• Novelty: Evolved capability. Phishing is an established threat, but the integration of generative AI to create high-fidelity, highly eloquent imposter sites represents a significant evolution in attacker capabilities.

Impact by dimension

• Physical security: Negligible. The incident is a cyber-enabled financial fraud campaign with no physical security threats or critical infrastructure disruptions reported.
• Information security: Minor. Generative AI is used to scale and refine phishing campaigns, representing an evolved capability in social engineering, though it does not target classified information or intelligence assets.
• Sovereignty: Minor. The campaigns impersonate a key government agency (the IRS) to deceive citizens, which exploits trust in state institutions but does not directly disrupt core government decision-making or operations.
• Economic security: Minor. While causing significant cumulative financial losses to individual taxpayers (averaging $8,199 per victim), the fraud does not threaten macroeconomic stability or strategic industries.
• Societal stability: Negligible. The incident is focused on financial cybercrime and does not threaten civil liberties, social cohesion, or cause widespread societal instability.