IRS Impersonation Scam

What the scam is

The caller claims to be from the IRS, its Criminal Investigation division, or another government office. They say a tax bill was missed, a federal warrant has been issued, or a Social Security number is about to be suspended. The caller then demands payment immediately to make the supposed problem disappear.

The identity is made convincing with a badge number, a case number, a Washington, D.C. caller ID, or a second person who pretends to be a supervisor. The pressure is intentional: the scammer wants your parent afraid to hang up, verify the claim, or call someone they trust.

The payment demand gives it away: real government agencies do not demand Target, Apple, or Google gift cards, ask for their PINs, or threaten arrest because someone will not pay over the phone.

Annotated example IRS impersonation call

This is a typical exchange built from the scripts scammers use. Each caller line is followed by the red flag that CallShield is looking for.

Once a parent hangs up and calls a trusted family member or the agency through a known official channel, the fake warrant and payment deadline lose their power.

How CallShield catches this

For an unknown caller, CallShield analyzes the live transcript for combinations of pressure and impersonation patterns while the call is happening. An IRS script like the one above can produce these labeled signals:

• impersonation_irs — the caller claims to represent the IRS or another federal agency.
• legal_threat — the caller uses a federal warrant, arrest, or account-freeze threat.
• gift_card_payment — the caller demands Target, Apple, Google, or another gift card.
• urgency_pressure — the caller sets a short deadline or says the consequence is immediate.
• sensitive_info_request — the caller asks for an SSN, date of birth, bank details, or other identity information.
• caller_id_mismatch — the caller ID does not match the identity the caller claims.

When the AI score crosses the scam threshold, the live call path records the event as flagged. The Call Log distinguishes flagged calls that passed through for monitoring from blocked calls that were auto-rejected by CallShield, so a caregiver can see the action taken instead of relying on the caller's story.

If high-risk email alerts are enabled and the score meets the configured HIGH_RISK_SCORE_THRESHOLD (0.8 by default), CallShield sends the caregiver an alert with the caller, score, labeled patterns, summary, and a link to the call.

From the caregiver dashboard, the per-call detail view shows the scam-pattern score, labeled patterns, AI summary, and full transcript. That lets you review exactly what triggered the alert and help your parent recognize the same script next time.

See the full detection flow on How it works, or review related questions in the FAQ.

Red flags to listen for

Any one of these is a reason to hang up and verify independently.

• The caller claims to be from the IRS, Social Security Administration, or another government office and demands payment on the spot.
• They say your parent owes back taxes, has a federal warrant, or will be arrested, deported, or locked out of an account.
• They impose a deadline measured in minutes or insist the problem will become worse if your parent pauses.
• They demand Target, Apple, Google, Walmart, or other gift cards, or ask for the PINs over the phone.
• They ask for an SSN, bank login, date of birth, credit-card number, or other personal information to "verify" the case.
• They insist the caller ID proves they are in Washington, D.C., or refuse to let your parent hang up and use a trusted number.

What to do if your parent receives this call

1. Hang up. Do not argue, press a number, or stay on the line to prove the caller wrong.

2. Verify independently. Use the phone number on an existing IRS notice or another trusted official source. Never use a callback number the caller provides.

3. Tell someone you trust. Call a family member, caregiver, or tax professional before sending money or sharing personal information.

4. If gift cards or personal information were already sent, contact the card issuer or bank immediately, keep receipts and messages, and report the fraud to the FTC at reportfraud.ftc.gov.