Taxpayers across the United States are being urged to adopt a critical new mantra this tax season: "Type, don't tap." This stark warning comes as experts report a dramatic surge in sophisticated tax refund thefts, driven by an alarming increase in robocalls, deceptive texts, and phishing emails that leverage artificial intelligence to appear more convincing than ever before.
A Relentless Deluge of Deception
Eva Velasquez, the CEO of the Identity Theft Resource Center, described the current wave of scams as a "deluge," emphasizing its relentless nature. Scammers are employing increasingly advanced tactics, including the use of alarming language, embedded QR codes, and AI-powered voice mimicry technology. These methods are designed to panic individuals into visiting fraudulent websites, inadvertently installing malware on their devices, or revealing sensitive personal information such as Social Security numbers and bank details, which are then used for identity theft and to steal tax refunds.
The Golden Rule: Type, Don't Tap
In response to this escalating threat, Velasquez and other cybersecurity authorities are advocating for a simple yet highly effective defensive strategy. The core advice is to never click on links received via unsolicited messages claiming to be from tax authorities like the IRS. Instead, taxpayers should manually type the official website address—such as IRS.gov—directly into their browser's address bar.
"Go to the source. Don't click any of those links," Velasquez strongly advised. "If you didn't initiate the contact, don't engage." This practice helps bypass malicious links that can lead to fake login pages designed to harvest credentials or download harmful software.
Recognizing the Warning Signs
Taxpayers should be vigilant for several red flags indicating they may have been targeted. These include unexpected communications demanding immediate action or payment, messages containing urgent threats about alleged tax debts or refund issues, and any contact that pressures you to click a link or scan a QR code. Legitimate agencies like the IRS typically initiate contact through traditional mail first, not via unsolicited calls, texts, or emails with links.
The sophistication of these scams is notably heightened by artificial intelligence, which can clone voices to make fake calls seem authentic or generate convincing phishing text. This technological edge makes it crucial for individuals to verify any tax-related communication independently by contacting the agency through verified official channels, not the contact details provided in the suspicious message.
As the 2026 tax season progresses, with the IRS having recently announced updates to standard deductions and federal income tax brackets, the environment is ripe for fraudsters. Protecting personal information has never been more critical, and adhering to the "type, don't tap" principle could be the key to safeguarding your financial identity and ensuring your tax refund reaches you, not a criminal.
