IRS 2026 Dirty Dozen Tax Scams: What Every Inland Empire Small Business Owner Must Know
The IRS 2026 Dirty Dozen tax scams list names 12 active threats — and at least 7 target small business owners directly through fake credits, phishing, fraudulent payroll schemes, and AI-powered impersonation. As of June 2026, the IRS has confirmed all 12 scams are actively circulating. Falling for even one can trigger an IRS audit, civil penalties, or criminal referral under IRC §7206.
Written and reviewed by Adham Abadier, CPA — a California Board of Accountancy licensed Certified Public Accountant (License #158599) and founder of Catalyst CPA Corporation serving Moreno Valley, Riverside, and the broader Inland Empire.
Scammers do not take summers off. The IRS formally announced the 2026 Dirty Dozen list (IRS.gov, 2026 Dirty Dozen announcement) as part of its Security Summit initiative — a coalition of the IRS, state tax agencies, and the tax industry. With more than 1 billion phishing emails sent to U.S. taxpayers annually (IRS Security Summit, 2025 Annual Report), the odds that an Inland Empire small business owner encounters at least one Dirty Dozen scheme this year are near-certain. This post breaks down the 7 IRS 2026 Dirty Dozen tax scams most dangerous to business owners and gives you a concrete action checklist to protect your company.
Key Takeaways
- ✅ The IRS released its 2026 Dirty Dozen list in early 2026 — all 12 scams are confirmed active as of June 2026.
- ✅ Phishing/smishing (fake IRS emails and texts) is the #1 scam on the list; the IRS never initiates contact by email or text (IRS Publication 2194).
- ✅ Fraudulent Employee Retention Credit (ERC) promoters remain on the list; improper ERC claims carry a 20% accuracy penalty under IRC §6662.
- ✅ A new 2026 entry: fraudulent undistributed capital gains claims via Form 2439 — a sign that scammers are getting more sophisticated.
- ✅ Fake tax professionals who charge fees based on refund size are a 2026 Dirty Dozen warning — a licensed CPA never charges a percentage of your refund.
- ✅ Payroll data theft targets business owners specifically; one compromised W-2 dataset can enable hundreds of fraudulent returns filed under your employees’ SSNs.
- ✅ AI-generated voice and email scams now impersonate both IRS agents and your CPA — verify any unusual financial request by calling back on a known number.
The 7 IRS 2026 Dirty Dozen Tax Scams Most Dangerous to Small Business Owners
1. Phishing Emails and Smishing Texts (IRS Impersonation)
Scammers send emails, text messages, and even direct messages on social media that appear to be from the IRS. These messages use alarming subject lines — “Your account has been suspended” or “Immediate action required on your 2025 return” — and often embed QR codes linking to fake irs.gov lookalike websites. Once you enter credentials or banking information, the scammer drains accounts or files fraudulent returns in your name. The IRS never contacts taxpayers by email, text, or social media to request personal data or payment (IRS Report Phishing page). Forward suspicious emails to phishing@irs.gov and delete them immediately.
2. Spear-Phishing Targeting Tax Professionals (and Their Clients)
This variant targets CPAs, enrolled agents, and bookkeepers — and by extension, every client in their database. A scammer poses as a software vendor, payroll provider, or even a client and tricks a tax professional into opening a malicious attachment. If your CPA’s system is compromised, your entity documents, EIN, and prior-year returns are all at risk. This is one reason Catalyst CPA uses multi-factor authentication and encrypted file exchange for all client communications. If you have questions about how we protect your data, learn more about our firm and security practices.
3. Fake Tax Professionals and Ghost Preparers
The 2026 Dirty Dozen specifically warns about “ghost preparers” — individuals who prepare your return for a fee but refuse to sign it. A paid tax preparer is legally required to sign your return and include their PTIN under IRC §6109(a)(4). A ghost preparer often inflates deductions or claims credits you do not qualify for, pockets the fee, and leaves you holding the penalty. The IRS assessed more than $5.5 billion in accuracy-related penalties under IRC §6662 in fiscal year 2024 (IRS Data Book, FY2024) — many traced back to unqualified preparers. Protect yourself by working only with credentialed professionals; our business tax preparation services are always signed, PTIN-documented, and fully transparent.
4. Fraudulent Employee Retention Credit (ERC) Claims
The ERC was a legitimate pandemic-era credit under IRC §3134, but IRS compliance data shows rampant abuse. Promoters cold-call small business owners promising large refunds regardless of eligibility. Businesses that claimed the ERC improperly face repayment of the full credit plus a 20% accuracy-related penalty under IRC §6662 and potential 75% civil fraud penalty under IRC §6663 (IRS ERC Warning page). If you received ERC funds and are unsure whether your claim was legitimate, our IRS problem resolution team can review eligibility before the IRS contacts you first.
5. AI-Generated Voice Scams and Deepfake Impersonation
New for 2026: the IRS flagged AI-powered phone scams where a cloned voice — sometimes mimicking a real IRS agent or even your own accountant — calls demanding payment or sensitive data. One Riverside County landscaping LLC owner received a call that sounded exactly like his CPA asking for his payroll login credentials to “fix a filing error.” He called his CPA on a separate line and confirmed it was a scam. Rule of thumb: never transfer funds or share login credentials based solely on an inbound phone call, no matter how familiar the voice sounds.
6. Payroll Data Theft and W-2 Fraud
Business owners hold a goldmine for identity thieves: their employees’ names, SSNs, addresses, and wage data. The 2026 Dirty Dozen highlights schemes where fraudsters impersonate a company executive (business email compromise, or BEC) and email the payroll administrator asking for a “quick dump” of all W-2 data. Compromised W-2 data enables fraudsters to file hundreds of fake tax returns collecting refunds before the real employees even know they were victimized. Inland Empire businesses with 10+ employees on QuickBooks Payroll should restrict payroll data export access to named administrators only and confirm any W-2 data requests by phone before responding. Our California payroll services include access controls and audit trail reviews that help prevent exactly this scenario.
7. Fraudulent Social Media Tax Advice (Fuel Tax Credit Abuse)
Online influencers and social media posts continue to promote fraudulent tax schemes including inflated fuel tax credit claims. The federal fuel tax credit under IRC §34 applies only to off-highway business use of fuel — not to ordinary commuting, passenger vehicles, or most service businesses. Despite this, promoters push small business owners to claim thousands in fuel credits they clearly do not qualify for. The IRS has criminal investigation units specifically monitoring these social media-driven schemes. Claiming a fraudulent fuel credit can result in a $5,000 frivolous return penalty under IRC §6702 in addition to repayment of the bogus refund.
“I see Inland Empire small business owners fall for these scams every single year — not because they’re careless, but because scammers have gotten frighteningly good. The ERC promoter calls are especially aggressive. If someone you’ve never worked with is promising you a five-figure refund for 10 minutes of work, hang up the phone and call a licensed CPA to check eligibility first. The penalty for a bad claim always costs more than the refund.”
What the 2026 Dirty Dozen Tax Scams Look Like in Your Books
Red Flags in Your QuickBooks or Accounting Records
Scam exposure often leaves traces in your financial records before you even realize something went wrong. If you maintain clean, current books — or use monthly bookkeeping services through Catalyst CPA — these anomalies get caught early. Watch for:
- Unscheduled payroll runs — a sign of payroll system compromise or BEC fraud.
- Unexpected ERC credit refunds hitting your bank account from returns you did not knowingly file.
- Vendor payments to unfamiliar EINs that appeared after a phishing incident.
- Fuel or vehicle expense line items that spike suddenly — especially if a preparer added them without your knowledge.
- Amended return filings you did not authorize — pull your IRS transcript at IRS.gov to verify what has been filed under your EIN.
- Missing or altered W-2 data for employees who did not report discrepancies at filing time.
The IRS Paper Trail Scammers Leave Behind
Every fraudulent claim generates an IRS record. If a ghost preparer filed an inflated return under your EIN, the IRS transcript will show the discrepancy between the return data and your payroll records and 1099s. Pulling a Wage and Income Transcript and a Tax Return Transcript from IRS.gov each spring confirms that only returns you authorized are on file. California small business owners should also check their California Franchise Tax Board (FTB) MyFTB account for any amended 540/100S filings they did not initiate. If you discover an unauthorized filing, our amended tax return services can help you correct the record quickly.
2026 Dirty Dozen Tax Scams: Comparison at a Glance
| Scam | Primary Target | Potential Penalty / Harm | IRS Code Section |
|---|---|---|---|
| Phishing / Smishing | All taxpayers, business owners | Identity theft, fraudulent refunds, account takeover | IRS Pub. 2194 |
| Spear-Phishing (Tax Pros) | CPAs, EAs, bookkeepers | Client data breach, fraudulent returns filed at scale | IRC §7216 (unauthorized disclosure) |
| Ghost Preparers | Small business filers | Inflated deductions → accuracy penalty 20% of underpayment | IRC §6662, §6109 |
| Fraudulent ERC Claims | Small/mid-size employers | Repayment + 20–75% penalty + potential criminal referral | IRC §3134, §6662, §6663 |
| AI Voice / Deepfake Scams | Business owners, executives | Wire transfer fraud, credential theft | N/A (criminal fraud statute) |
| Payroll / W-2 Data Theft | Employers with payroll records | Employee identity theft, fraudulent returns, IRS notices to employees | IRC §6721 (information return penalties) |
| Fuel Tax Credit Abuse | Small business owners | $5,000 frivolous return penalty + repayment of refund | IRC §34, §6702 |
5 Steps Every Inland Empire Small Business Owner Should Take Right Now
Step-by-Step Protection Checklist Against 2026 Tax Scams
- Pull your IRS transcript today. Log in at IRS.gov → “Get Your Tax Record” and download your most recent Wage & Income Transcript and Account Transcript. Confirm no returns were filed under your EIN that you did not authorize.
- Enable multi-factor authentication on your tax software, payroll platform, and banking portal. QuickBooks Online, ADP, Gusto, and Chase all support MFA — enabling it takes under five minutes and eliminates most credential-based attacks.
- Verify your ERC status. If you worked with a third-party ERC promoter in 2021–2023, have a CPA review the eligibility documentation before the IRS contacts you. The IRS ERC Voluntary Disclosure Program closed in March 2024, but the IRS continues to audit and claw back improper claims.
- Establish a verbal confirmation policy for financial requests. Any email request to wire money, share payroll data, or change banking information must be confirmed by a live phone call to a known number — not a number in the email itself.
- Work only with credentialed tax professionals. Verify your CPA or enrolled agent on the IRS Directory of Federal Tax Return Preparers. California CPAs can be verified at the California Board of Accountancy website. Adham Abadier holds CPA License #158599, verifiable with the California Board of Accountancy.
A Real-World Inland Empire Example
A Fontana-based construction LLC with 14 employees received a cold call in February 2026 from a promoter claiming the business qualified for a $68,000 ERC refund. The promoter requested the company’s QuickBooks payroll reports and EIN. The owner called Catalyst CPA before sharing anything. A 30-minute eligibility review confirmed the company did not meet the gross receipts reduction test under IRC §3134 for any of the applicable quarters — the “refund” would have been a fraudulent claim triggering full repayment plus a 20% accuracy penalty of approximately $13,600. Thirty minutes with a CPA saved the owner $81,600 in potential liability.
Received a Suspicious Call or ERC Pitch? Get a Free 30-Minute CPA Review.
Catalyst CPA Corporation serves Moreno Valley, Riverside, Fontana, Corona, and the entire Inland Empire. A licensed CPA review of your ERC status or tax account takes 30 minutes and can save you from penalties that cost far more than the original refund.
Frequently Asked Questions: IRS 2026 Dirty Dozen Tax Scams
What is the IRS Dirty Dozen list for 2026?
The IRS Dirty Dozen is an annual list of the 12 most dangerous and prevalent tax scams identified by the IRS through its Security Summit initiative. For 2026, the list includes phishing/smishing, spear-phishing targeting tax professionals, ghost preparers, fraudulent ERC claims, AI voice scams, payroll data theft, and social media-driven schemes like fraudulent fuel tax credit claims. The full list is published at IRS.gov.
Does the IRS ever contact small businesses by email or text?
No. The IRS initiates contact with taxpayers and businesses exclusively by U.S. mail (IRS Publication 2194). Any email, text, direct message, or social media contact claiming to be from the IRS requesting personal information or payment is a scam. Forward suspicious emails to phishing@irs.gov and call the IRS directly at 1-800-829-1040 to verify any claimed issue.
How do I know if an ERC claim was filed under my EIN without my knowledge?
Log in to IRS.gov and pull your Account Transcript for tax years 2020–2021. Any ERC credit claimed under IRC §3134 will appear as a refundable credit on your transcript. If you see a credit you did not file for, contact the IRS Identity Protection Specialized Unit at 1-800-908-4490 immediately.
What is a ghost preparer and why is it illegal?
A ghost preparer is a paid tax return preparer who refuses to sign the return or enter their PTIN. Under IRC §6109(a)(4), any paid preparer must sign returns and include their Preparer Tax Identification Number. Filing a return with an inflated deduction or fabricated credit at a ghost preparer’s direction still makes the taxpayer liable for the resulting underpayment penalty under IRC §6662.
Can I be penalized even if I did not know the credit was fraudulent?
Yes. The 20% accuracy-related penalty under IRC §6662 applies when there is a substantial understatement of tax, regardless of whether the taxpayer knew the claim was improper. The “reasonable cause” exception under IRC §6664(c) can reduce or eliminate the penalty, but it requires demonstrating good-faith reliance on a qualified tax professional — not a promoter or social media tip.
How do I verify that my CPA is licensed in California?
California CPAs are licensed by the California Board of Accountancy (CBA). You can verify any CPA’s license status, including license number and any disciplinary history, at the CBA’s online license lookup tool. Adham Abadier holds California CPA License #158599, active and in good standing.
What should I do if I clicked a phishing link and entered my information?
Immediately change the password for any account associated with the information you entered and enable multi-factor authentication. Place a fraud alert on your credit file with Equifax, Experian, and TransUnion. Report the incident to the IRS at phishing@irs.gov and file an Identity Theft Affidavit (IRS Form 14039) to protect your tax account. If payroll credentials were compromised, notify your payroll provider immediately to freeze the account.
Are AI-generated voice scams covered by the 2026 IRS Dirty Dozen?
Yes. For the first time in 2026, the IRS explicitly flagged AI-powered voice cloning and deepfake phone scams as an emerging threat. These scams use artificial intelligence to replicate the voice of a trusted person — an IRS agent, your accountant, or a business partner — to pressure you into wiring money or sharing login credentials. The defense is a strict callback policy using a phone number you independently verify, not one provided by the caller.
Protect Your Inland Empire Business Before the IRS Knocks
The 2026 IRS Dirty Dozen tax scams list is not a theoretical warning — Catalyst CPA has already fielded calls from Moreno Valley and Riverside business owners who received ERC promoter pitches and AI voice calls this filing season. If you received a suspicious communication, filed an ERC claim through a third party, or simply want a licensed CPA to review your exposure, contact Catalyst CPA Corporation today.
Adham Abadier, CPA (License #158599) reviews IRS compliance issues for small businesses throughout the Inland Empire — including Moreno Valley, Riverside, Corona, Eastvale, Fontana, and San Bernardino.
Last reviewed: June 9, 2026 by Adham Abadier, CPA (CA #158599).
Disclaimer: This article is intended for general informational and educational purposes only and does not constitute legal, tax, or accounting advice. Tax laws and IRS guidance are subject to change; consult a licensed CPA or tax attorney for advice specific to your situation. Use of this content does not establish a client-CPA relationship with Catalyst CPA Corporation. Adham Abadier, CPA is licensed by the California Board of Accountancy (License #158599). All IRC code references are to the Internal Revenue Code as in effect as of the publication date of this post.
