The US Internal Revenue Service (IRS) warned that scammers are mailing counterfeit letters to crypto holders, directing them to a fraudulent Digital Asset Compliance Portal designed to steal personal data and digital assets. These fake letters, which contain QR codes linking to spoofed websites, are not sent by the IRS, which does not operate any such compliance portal. Coinbase and threat intelligence firm DarkTower identified the campaign, with the look-alike domain registered through a Hong Kong registrar and hosted in Romania. Chainalysis estimated that scams and fraud cost victims $17 billion in 2025, with a 1,400% surge in impersonation scams. TRM Labs recorded 207 hacks in the first half of 2026, more than double the previous year, suggesting attackers are pivoting from code exploits toward human targets.
Source: Read the original article
