This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
Cybersecurity firms have reported a significant increase in tax-related phishing scams in 2025, with attackers leveraging artificial intelligence to create more convincing imposter websites and emails. These AI-enhanced scams mimic official IRS branding with high fidelity, tricking taxpayers into providing sensitive personal and financial information. The IRS has issued warnings regarding these fraudulent activities, emphasizing that they do not solicit sensitive information via email or text.
Scammers have allegedly been using AI-generated imposter websites and phishing emails to impersonate the IRS. They have reportedly been tricking taxpayers into providing personal and financial information. There has been a reported surge in tax-related AI scams leading up to Tax Day 2025, with fraudulent domains mimicking IRS services, along with fake websites, emails, and text messages. The IRS has warned taxpayers to verify official sites and avoid unsolicited links.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
Using AI systems to gain a personal advantage over others such as through cheating, fraud, scams, blackmail or targeted manipulation of beliefs or behavior. Examples include AI-facilitated plagiarism for research or education, impersonating a trusted or fake individual for illegitimate financial benefit, or creating humiliating or sexual imagery.
Also classified as
The phishing campaigns specifically target taxpayers to steal their highly sensitive personal and financial information.
The incident involves malicious actors using AI to generate highly realistic imposter websites and emails to defraud taxpayers and steal their financial assets.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The risk is driven by human scammers who intentionally deploy generative AI tools post-deployment to create highly convincing phishing materials for financial gain.
Added categories peak at 2: Minor (Psychological Harm, Inferred)
Malicious actors are leveraging generative AI to execute highly convincing IRS-themed phishing scams, resulting in a 77% surge in tax-related cyber fraud. While causing notable financial losses to individual citizens and mimicking a federal agency, the incident represents a minor national security threat manageable through standard cybersecurity and law enforcement procedures.
The report describes scammers using artificial intelligence as a tool to generate realistic text and visuals for phishing emails and imposter websites, performing specific content generation functions based on direct inputs.
Limited Risk: The AI systems are used to generate synthetic content (emails and website visuals) that mimic legitimate entities, which falls under transparency obligations for AI-generated content.
The AI was primarily used as a writing assistant to generate eloquent phishing emails and copy for imposter websites, and secondarily to generate realistic brand visuals.
The report clearly details the role of AI in enhancing tax scams by generating realistic emails and websites. While the specific AI models are not named, the mechanism of harm (phishing and financial fraud) and the scale of the threat are well-documented by cybersecurity firms like Guardio and DNSFilter.
None. The incident is a straightforward case of malicious actors leveraging AI tools for financial fraud.
Technology
AI-Generated Imposter Sites
AI precisely replicates official IRS website visuals.
AI-Generated Phishing Emails
Generative AI produces highly eloquent scam emails.
Human Factors
Inability to Spot AI Scams
Taxpayers cannot distinguish AI-eloquent text from real IRS emails.
AI system involved
An AI system was involved, but the reports do not identify it.
Identified by automated extraction; can differ from the alleged developers above.
