
Cybercriminals are now using AI-generated voices to impersonate tax professionals and IRS agents, adding a dangerous twist to this year’s tax-season scams.
Security researchers report a surge in AI-enabled phishing attacks, where scammers use stolen personal data and deepfake audio to mimic accountants, tax preparers, and even family members. Victims are duped into handing over Social Security numbers, financial credentials, or access to IRS accounts.
“These scams are now more scalable and believable,” said Casey Ellis, founder of Bugcrowd. “Deepfake videos and AI-crafted emails make it harder to tell what’s real.”
Voice phishing is just part of a broader trend. Attackers are also using text messages, fake tax apps, and typosquatted websites—including misleading sites referencing “Trump tax refunds” and well-known services like H&R Block—to steal credentials. Some scams even use QR codes in PDFs that download malware.
Between February 12 and 28, Microsoft detected tax-themed phishing emails sent to over 2,300 U.S. organisations, primarily in tech, consulting, and engineering.
Experts urge vigilance: verify any unexpected requests, avoid clicking suspicious links, and be wary of urgent messages. As Keeper Security’s Patrick Tiquet warned, “If it sounds off, it probably is.”
© 2025, Lyonsdown Limited. teiss® is a registered trademark of Lyonsdown Ltd. VAT registration number: 830519543