Cryptocurrency owners across the United States are being warned to stay vigilant after a sophisticated mail fraud scheme began circulating official looking notices from the Internal Revenue Service. These deceptive letters urge recipients to register for something called a Digital Asset Compliance Portal via a QR code. However, the IRS has clarified that no such portal exists, and anyone who scans the code is directed to a fraudulent website designed specifically to harvest sensitive financial data and wallet credentials.
The scam typically unfolds in stages, beginning with the fake registration page and following up with phone calls from individuals pretending to be government officials. These bad actors attempt to pressure victims into handing over passwords, two factor authentication codes, or private keys to their crypto accounts. Investigations led by researchers at Coinbase and DarkTower have traced the infrastructure behind this operation back to a domain registrar in Hong Kong and hosting services in Romania known for similar bank and shipping company impersonations.
This latest threat arrives during a period of staggering losses for American investors. According to reports from the FBI’s Internet Crime Complaint Center, cryptocurrency related fraud has become one of the most costly categories of crime, accounting for billions of dollars in losses annually. Unlike typical investment scams that build trust over time through social media groups, these IRS impostors rely on fear and the perceived authority of a federal agency to trick people into compromising their own security settings quickly.
To protect themselves, users are reminded that the IRS will never request wallet addresses, seed phrases, or private keys through an unsolicited mailing or external website. Experts advise checking URLs carefully to ensure they end in gov and reporting any suspicious correspondence to the FBI’s IC3 tipline immediately. Those who believe they have already interacted with the fake portal are encouraged to change their passwords instantly and consider freezing their credit if personal identifiers like Social Security numbers were disclosed.
