The Fake IRS Crypto Letter You Need To Know

Fraudsters are mailing physical letters to crypto holders, impersonating the IRS and directing recipients to a fake government website. The "Digital Asset Compliance Portal" referenced in the letter does not exist.

If you received one of these letters, or know someone who did, here is exactly what you need to know before clicking anything.

Coinbase and Its Partner Traced the Operation

Coinbase and its partner DarkTower traced the operation's infrastructure to a domain registered through a Hong Kong registrar, just days before the letters began arriving in mailboxes. The site itself was hosted in Romania on a network with a documented history of hosting financial phishing operations.

This was not a casual effort. The letters use official-looking IRS letterhead and design, include a fabricated enrollment deadline to create urgency, and rely on a QR code to push you past your instinct to manually type and verify a URL before visiting it.

The QR Code Is the Trap

The letter includes a QR code that redirects to a fake IRS.gov lookalike site. Once there, the site may ask for your crypto wallet credentials, exchange account login information, and personal identifying data.

That combination is enough to steal your identity and drain your digital assets. The QR code exists specifically because most people pause before typing an unfamiliar URL, but scan a code without a second thought.