A mailed "IRS" letter says you must register your crypto in a compliance portal — it's a scam
Fake IRS letters mailed to crypto holders demand enrollment in a nonexistent "Digital Asset Compliance Portal" by scanning a QR code. The fake site steals exchange logins and wallet seed phrases; follow-up calls harvest 2FA codes.
Also known as: IRS Digital Asset Compliance Portal scam, fake IRS crypto letter, IRS DACP scam, crypto compliance portal letter fraud, fake IRS cryptocurrency compliance notice
Already happened to you? Do this in the next few minutes
- 1 Call your bank or card's fraud line right now. Use the number on the back of your card — not any number from the message or caller. Ask them to stop or reverse the payment and freeze the account.
- 2 If you paid by gift card, wire, or an app (Zelle, Venmo, Cash App): contact that company immediately and report it as fraud. Acting fast sometimes recovers the money.
- 3 Report to the FBI at ic3.gov and the FTC at reportfraud.ftc.gov. The sooner, the better.
What to do right now
- 1 Do not scan the QR code and do not enter any credentials on any site reached through the letter
- 2 If you already entered exchange credentials: change your password and 2FA immediately, notify your exchange's fraud team, and enable withdrawal locks if available
- 3 If you surrendered a recovery phrase or private key: your wallet is compromised — move remaining funds to a new wallet with a freshly generated seed phrase immediately
- 4 Report the letter to IRS Criminal Investigation at https://www.irs.gov/compliance/criminal-investigation
- 5 Preserve the letter (photograph it) as evidence before reporting
- 6 Report to the FTC at https://reportfraud.ftc.gov and the FBI's IC3 at https://www.ic3.gov.
Red flags
- ⚠ The IRS does not operate a 'Digital Asset Compliance Portal' — this portal does not exist
- ⚠ IRS never includes QR codes in any official mailed correspondence — a QR code in any IRS-looking letter is an immediate red flag
- ⚠ The URL after scanning does not end in .gov — any domain outside irs.gov is fake
- ⚠ The site or a follow-up caller asks for your wallet recovery phrase or private key — no legitimate entity ever needs these
- ⚠ Artificial deadline ('register before August 10') creates panic to bypass critical thinking
- ⚠ Letters reference tax years 2017–2026 to simulate a comprehensive audit — the IRS does not conduct crypto compliance via mailed QR codes
Crypto holders across the US began reporting mailed letters in July 2026 that impersonate IRS compliance notices. The letters claim that the IRS requires taxpayers to register their digital asset holdings through a “Digital Asset Compliance Portal” (DACP) — a portal that does not exist.
IRS Criminal Investigation issued a fraud alert on July 30, 2026, confirming the letters are fraudulent. The QR codes inside lead to a fake site (irs.digitalcomplianceportal[.]com) registered through Hong Kong and hosted on Romanian servers. The site collects exchange credentials, recovery phrases, and private keys — any one of which gives attackers complete control of the victim’s crypto accounts.
A second wave of attacks follows by phone: scammers who obtained the victim’s address from the mailing call, pose as IRS support, and attempt to walk victims through “verification” that harvests 2FA codes or recovery phrases.
One rule protects you: The IRS never includes QR codes in any mailed correspondence. If a letter claiming to be from the IRS contains a QR code, it is a scam — regardless of how official it looks.
Sources
- IRS Criminal Investigation — Fraud Alert: Fake IRS letters target cryptocurrency holders (Jul 30, 2026)
- Help Net Security — Fake IRS letters direct crypto holders to bogus compliance portal (Aug 4, 2026)
- Coinbase — Consumer Protection Tuesday: Fake IRS 'Digital Asset Compliance Portal' scam (Aug 2026)
- Bitdefender — Fake IRS letters target cryptocurrency holders (Aug 2026)
- Journal of Accountancy — IRS warns crypto holders about fake compliance portal scam (Aug 2026)
- Bloomberg — Scam artists are posing as IRS agents to drain crypto wallets (Jul 30, 2026)
- Accounting Today — IRS CI warns of fake IRS letters targeting crypto holders (Aug 2026)
- CryptoTimes — Crypto Alert: Fake IRS 'Digital Asset Compliance Portal' Letters Arrive in Mail (Aug 21, 2026)