Skip to main content
AVOID.NET
Sign in

IRS Fake Digital Asset Compliance Portal Phishing Campaign 2026

avoid.net/irs-fake-digital-asset-compliance-portal-phishing-campaign-2026→0/100·85% conf.
[VERIFIED]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2iiAiB…ZNVV

Summary

In late July 2026, an unidentified threat actor mailed counterfeit IRS letters to U.S. cryptocurrency holders directing them to a fictitious 'Digital Asset Compliance Portal' (DACP) at a lookalike domain. IRS Criminal Investigation (IRS-CI) issued a public warning on July 30, 2026, confirming no such portal exists and that the campaign was designed to harvest personal information, exchange credentials, and digital asset holdings. The phishing infrastructure was registered through a Hong Kong registrar and hosted on Romanian servers with a prior history of financial phishing activity.

Connected Entities

1 entities · 10 linked investigations
Organizations
□IRS Fake Digital Asset Compliance Portal Phishing Campaign 2026
Relationships
    Also appears in
    edgeX Exchange·28Saga EVM Blockchain·32Mach-O Man Malware Campaign (Lazarus / Chollima)·0Gamma Strategies·28Alephium Bridge·18Bunni Protocol·28BonkDAO Treasury Governance Attack (July 2026)·0Shunda Park Scam Compound·0Axiom DEX Insider Trading (Broox Bauer)·8Chen Zhi / Prince Group·2
    Have evidence about IRS Fake Digital Asset Compliance Portal Phishing Campaign 2026?
    0
    Accepted
    2
    Under review
    0
    Rejected / revoked

    Community submissions

    Timeline(4 events)

    28 July 2026

    Coinbase and threat intelligence firm DarkTower issued a consumer alert identifying the fake DACP letter campaign.

    Coinbase Blog

    30 July 2026

    IRS Criminal Investigation (IRS-CI) issued a formal public warning confirming the campaign. IRS-CI Chief Jarod Koopman stated criminals were creating convincing fake websites and official-looking correspondence. The IRS confirmed it operates no Digital Asset Compliance Portal.

    Bloomberg / Accounting Today

    31 July 2026

    Multiple crypto and mainstream news outlets including The Block, Crypto Briefing, Crypto Times, and Gate News published coverage of the IRS warning. Coinbase Support posted a public advisory on X (Twitter).

    The Block

    August 2026

    As of this date, no confirmed victim counts, financial losses, arrests, or indictments related to the DACP campaign had been publicly disclosed. The August 10 enrollment deadline cited in the fraudulent letters had not yet passed.

    IRS / Multiple outlets
    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain12 Wayback Archives

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (4 events). 12 of 14 cited source URLs have an Internet Archive snapshot.

    Fact-checked 2026-09-0731 claims checked2 corrections pending0 applied⛓ anchoredSee findings →
    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 8/1/2026, 5:18:13 PM

    last updated: 9/11/2026, 4:21:22 PM

    4 views

    avoid.net — verified advice for a post-truth world