AI’s New Role in Sophisticated Tax Scams Exposed by Experts

AI’s New Role in Sophisticated Tax Scams Exposed by Experts

Summary

• AI in tax scams: Criminals are using AI to make tax scams more convincing.
• Targeted phishing: AI helps them write personalized messages that read like real ones.
• Defenses: Experts recommend user awareness backed by better security tools.
• What’s next: AI-driven scams keep changing, so defenses have to keep changing too.

How AI changed tax scams

Tax-related scams have risen sharply in recent years, and many experts link the increase to AI. The technology lets criminals produce more convincing fraud and makes it harder to detect.

Phishing that sounds like your accountant

Phishing emails used to be easy to spot. They were generic, badly written and often caught by spam filters. AI changes that. Criminals can now generate personalized messages that copy the tone and language of real tax notices, accountants or employers. Some tools pull details about targets from social media profiles and other public sources, so the email mentions a real employer or a recent move.

Why filters miss AI-written lures

Older defenses struggle with these messages. Filters tuned to catch spelling mistakes and known templates miss well-written, one-off emails, and scammers use AI to send them in volume. Security vendors are responding with their own AI-based detection that looks at behavior and context, not just wording.

Advice from security practitioners

Rick Driggers, a former senior cybersecurity official at the U.S. Department of Homeland Security, has urged organizations to plan for scenarios in which criminals use AI. That means threat modeling ahead of time and keeping systems updated.

Training still matters. Users who know that a perfectly written email can still be a scam are more likely to stop and check. Basic digital hygiene, such as verifying payment requests by phone, blocks many of these attacks.

What to expect next tax season

Scams will keep improving as AI does. Expect more convincing fake IRS notices, cloned voices of tax preparers and fake refund portals.

Security teams should track how these scams change and test their defenses against them. Research into detecting AI-generated content will need steady investment.

How to protect yourself

AI has given tax scammers better tools, especially for targeted phishing. AI-based security tools help, and so do aware users and planning ahead.

The simplest rules still work. The IRS does not start contact by email, text or social media about a tax bill or refund. Don’t click links in messages that claim to be from tax agencies, and confirm any payment or document request through a phone number you already have.

Fred Templeton, CISA, CASP, SEC+

Fred Templeton is a practicing Information Systems Auditor in the Washington DC area. Fred works as a government contractor and uses his skills in cyber security to make our country's information systems safer from cyber threats. Fred holds a master's degree in cybersecurity and is currently working on his PHD in Information Systems.