Fact-check findings
What an automated fact-checker found when it re-read IRS Fake Digital Asset Compliance Portal Letter Campaign — 2026 against the sources the page cites. Only the most recent review is shown.
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
unverifiable
3 claimsNo source the reviewer could reach confirms or contradicts the claim.
- #5[unverifiable][awaiting moderator]in the timeline
“On July 28, 2026, Coinbase and threat intelligence firm DarkTower release a consumer alert identifying the fake IRS 'Digital Asset Compliance Portal' letter campaign, after a customer report triggered an investigation.”
reviewerCoinbase/DarkTower consumer alert on July 28, 2026.Coinbase blog blocked; secondary reporting corroborates the customer-report origin but not the exact date. - #6[unverifiable][awaiting moderator]in section: Campaign overview
“most accounts, including Help Net Security, Crypto Briefing and The Block, give August 10, 2026”
reviewerReports differ on enrollment deadline; most give August 10, 2026.Help Net Security extract does not name August 10. Crypto Briefing and The Block were not fetched; the attribution to Help Net Security may be inaccurate. - #8[unverifiable][awaiting moderator]in section: Broader IRS impersonation and crypto scam landscape
“Cumulative figures across all IRS impersonation schemes exceed 2.4 million targeted individuals in the United States, with more than 14,700 victims reporting combined losses of $72.8 million”
reviewerAggregate impersonation statistics (2.4 million targeted, 14,700 victims, $72.8M; Chainalysis $17B; IC3 $11B; TRM 207 hacks).Not checked in this pass; background statistics are tangential to the campaign. The TRM Labs figure cites no TRM source in the section.
partially supported
1 claimThe cited evidence supports part of the claim but not all of it.
- #4[partially supported][awaiting moderator]in the summary
“A fraud campaign that began in late July 2026”
reviewerLetters were mailed in the form of a campaign that 'began in late July 2026'.First public alerts were July 28; actual first mailing date is not established by any source I could read, so 'began' is an inference.
confirmed
4 claimsThe cited evidence supports the claim as written.
- #1[confirmed][no action needed]in the summary
“IRS Criminal Investigation confirmed on July 30, 2026 that it operates no such portal and did not send the letters.”
reviewerIRS-CI confirmed on July 30, 2026 that it operates no such portal and did not send the letters.IRS-CI alert fetched and matches. - #2[confirmed][no action needed]in section: Official response
“IRS-CI Chief Jarod Koopman stated: 'Criminals continue to exploit public trust in government agencies by creating convincing fake websites and official-looking correspondence,' and advised: 'Before responding to unexpected requests for personal information, stop, verify the source, and report potential fraud schemes.'”
reviewerKoopman quotes about criminals exploiting public trust and 'stop, verify the source'.Consistent with the IRS page. - #3[confirmed][no action needed]in the summary
“Coinbase and DarkTower traced the infrastructure to a domain registered through a Hong Kong registrar days before the mailing and hosted on Romanian servers previously used for financial and delivery-service phishing”
reviewerCoinbase and DarkTower traced the site to a domain registered via a Hong Kong registrar days before mailing, hosted in Romania.Core infrastructure claim corroborated. The 'financial and delivery-service' prior-use detail and FedEx were not independently seen in fetched text. - #7[confirmed][no action needed]in section: Attribution and investigation status
“IRS-CI had not announced any arrests or indictments connected with this campaign as of early August 2026, and no arrests directly tied to it had been reported as of late August 2026.”
reviewerNo arrests or indictments announced.Consistent with my searches; page is appropriately time-stamped.