IRS Fake Digital Asset Compliance Portal Letter Campaign — 2026
Summary
A fraud campaign active as of late July 2026 in which unknown threat actors mail physically printed letters impersonating the IRS, instructing cryptocurrency holders to enroll in a nonexistent 'Digital Asset Compliance Portal' via an embedded QR code. The IRS Criminal Investigation division publicly confirmed on July 30, 2026 that it does not operate any such portal and did not send the letters. Infrastructure linked to the campaign was registered through a Hong Kong-based registrar and hosted on Romanian servers previously associated with financial phishing attacks.
Connected Entities
1 entities · 10 linked investigationsTimeline(6 events)
2026-07-28
Coinbase and threat intelligence firm DarkTower release a consumer alert identifying the fake IRS 'Digital Asset Compliance Portal' letter campaign after a customer report triggered investigation.
Crypto Briefing2026-07-30
IRS Criminal Investigation issues formal public warning, confirming no 'Digital Asset Compliance Portal' exists and that the letters are fraudulent. IRS-CI Chief Jarod Koopman issues statement.
Bloomberg2026-07-31
Multiple outlets including Accounting Today, CryptoTimes, and The Star (Malaysia) report on the IRS-CI warning. IRSnews official X account posts alert.
Accounting Today2026-08-03
CPA Practice Advisor publishes detailed breakdown of campaign mechanics and victim guidance, citing IRS-CI and DarkTower findings.
CPA Practice Advisor2026-08-04
Help Net Security and Bitdefender publish extended technical analyses of the multi-stage attack flow and phishing infrastructure.
Help Net Security2026-08-07
No arrests or law enforcement actions against campaign operators publicly announced as of this date. Investigation is ongoing per IRS-CI guidance.
AVOID.NET research compilationDecision Log
- #1publish⛓ pending8/7/2026, 12:30:18 PMhash: 5pZeeTLbJJ1KNfppZrTQvpf9LxKHDvEq96FS1YfXFaDi
11 of 15 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/7/2026, 12:30:07 PM
last updated: 8/7/2026, 6:59:22 PM
avoid.net — verified advice for a post-truth world