Cryptocurrency users are being warned about a new scam involving criminals impersonating the United States Internal Revenue Service (IRS) to steal personal information and gain access to digital asset accounts.
The IRS criminal investigation unit said scammers are using official-looking letters containing QR codes to trick victims into visiting fake websites designed to appear like legitimate government platforms.
According to the agency, victims are directed to register on a fake “Digital Asset Compliance Portal” before a stated deadline, where they are then asked to provide sensitive personal details.
IRS criminal investigation chief Jarod Koopman said criminals were taking advantage of public confidence in government institutions by creating convincing fake websites and documents.
Investigators found that the infrastructure supporting the scam was created only days before the fraudulent letters were distributed. The domain used in the campaign was reportedly registered through a Hong Kong-based registrar.
A security analysis by Coinbase found that the imitation website was hosted in Romania on a network previously linked to phishing websites targeting financial services and other major platforms.
The warning comes amid growing concerns over cryptocurrency-related cybercrime, with authorities reporting significant financial losses caused by scams involving digital assets and emerging technologies.
Data from the FBI’s Internet Crime Report showed that Americans lost more than US$11 billion (RM44.95 billion) to cryptocurrency scams in 2025, representing a 22 per cent increase compared with the previous year.
Authorities advised cryptocurrency holders to remain cautious of unexpected communications, avoid scanning suspicious QR codes and verify official requests through trusted government channels.
