Warning: IRS Alerts Users of Cryptocurrency Phishing Scams Involving Fake QR Codes and Emails

IRS Warns of Phishing Scams Targeting Cryptocurrency Users
The IRS (Internal Revenue Service) has issued a strong warning to all cryptocurrency users about the prevalence of phishing scams disguised as official communications.

The warning states:
"The IRS warns of a sophisticated email-based phishing campaign targeting U.S. cryptocurrency holders. This campaign uses fake letters impersonating the IRS and QR codes designed to steal wallet credentials and private keys."

In recent years, cybercrime targeting cryptocurrency holders has evolved. One of the most concerning aspects of this scam is the misuse of physical mail (letters) that arrive at homes, in addition to traditional email phishing.

Letters that are disguised with official logos to resemble legitimate tax notifications contain alarming messages such as, "You must register your digital assets by the specified deadline."

The letters instruct recipients to access a website called the "Digital Asset Compliance Portal," with the attackers' aim being to have victims scan the accompanying "QR code." However, the IRS has explicitly denied the existence of this portal, and the letters themselves are complete fakes.

Scanning Could Lead to Asset Theft or Compromise of Sensitive Information

Scanning the QR code with a smartphone leads victims to a phishing site that closely mimics the real IRS website. On this site, users are prompted to input or link the following sensitive information:

**- Requests to connect cryptocurrency wallets

• Authentication information such as exchange login IDs and passwords
• Seed phrases (recovery phrases) and private keys**

If victims follow the instructions and input their private keys or seed phrases, the attackers gain full access to their wallets, allowing them to steal stored cryptocurrency in an instant. This situation is particularly dangerous during times of market surges when investors may feel anxious or complacent, leading to an increase in such scams.

Guidelines to Prevent Fraud and Emergency Response Measures

To prevent potential losses and protect valuable assets, the following principles should be strictly adhered to:

Understand Basic Rules of Public Agencies
Government agencies like the IRS will never ask for QR code scans or request wallet private keys or seed phrases through unexpected letters.
Avoid Access Methods Provided
Never open QR codes or URLs found in received letters or emails; always verify and inquire through official channels.
Emergency Response for Information Leaks
If you accidentally enter your exchange password, immediately change your password, freeze your account, and contact the relevant exchange. Furthermore, if you have leaked your private keys or seed phrases, you must create a new secure wallet immediately and transfer any remaining assets to it.

Maintain a skeptical attitude towards scams impersonating public agencies and exercise caution with suspicious notifications.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.