Tax scammers increasingly target small business owners with sophisticated schemes designed to exploit business tax forms, payroll systems, and professional relationships.
The IRS’s 2026 “Dirty Dozen” list highlights threats that go far beyond the simple phishing emails most people recognize. Business owners face unique vulnerabilities around payroll withholding manipulation, ghost tax preparers who vanish after filing, and AI-generated phone calls that sound remarkably convincing. These scams can trigger audits, penalties, and legal liability that falls squarely on you regardless of who prepared your return.
Below you’ll find the most dangerous tax scams targeting small businesses this year, the specific warning signs to watch for, and practical steps to protect your company’s financial data and your personal liability from criminal schemes.
Also read: What Are the Different Types Of Business Entities?
The Growing Threat of AI-Powered IRS Impersonation
Phone scams have evolved beyond simple robocalls. Scammers now use computer-generated voices that sound natural and convincing, combined with spoofed caller IDs that display official-looking IRS numbers or local area codes.
These calls typically claim you owe back taxes, face immediate penalties, or have a pending refund that requires urgent action. The caller may demand payment through gift cards, wire transfers, or cryptocurrency. Some threaten arrest or legal action if you do not comply immediately.
The IRS does not operate this way. Legitimate IRS contact follows a specific pattern:
Initial contact arrives by mail, not phone
No demands for immediate payment over the phone
No threats of arrest or law enforcement involvement
No requests for payment through gift cards, wire transfers, or cryptocurrency
No requests for credit card or debit card numbers over the phone
Hypothetical example:
A scammer calls claiming to be from the IRS Collections Division, stating you owe $8,500 in back taxes and must pay within two hours to avoid arrest. The caller ID shows a Washington, D.C. number. This is a scam because the IRS sends written notices before making collection calls and never threatens immediate arrest.
Note: If you receive a suspicious call, hang up. Do not engage with the caller or provide any personal information. Contact the IRS directly using the phone number on their official website if you have questions about your tax situation.
Overstated Withholding Schemes Target Business Forms
One of the most dangerous scams specifically targeting business owners involves inflating withholding amounts on multiple business-related tax forms. Scammers promote this scheme as a way to generate larger refunds by reporting minimal or zero income while claiming substantial withholding.
These schemes abuse several forms commonly used by small business owners:
Form W-2 (employee wages)
Form 1099-R (retirement distributions)
Form 1099-NEC (nonemployee compensation)
Form 1099-DIV (dividend income)
Schedule K-1 (partnership or S corporation income)
The scam works by encouraging business owners to report inflated amounts in the “other withholding” or similar fields on these forms. The fraudulent return claims the IRS owes a large refund based on taxes supposedly already paid through withholding.
The IRS has sophisticated systems that cross-reference withholding claims with payer records. When the numbers do not match, the return gets flagged for review. This triggers delays, audits, penalties, and potentially criminal investigation.
Hypothetical example:
A promoter tells you to report $45,000 in withholding on your Schedule K-1 from your S corporation, even though actual withholding was only $3,200. The scheme promises a $38,000 refund. When the IRS cross-checks with your S corporation’s records, the discrepancy triggers an audit and penalties for fraudulent filing.
Business owners remain legally responsible for the accuracy of their tax returns regardless of who prepared them or what advice they received. Claiming false withholding amounts creates personal liability that can result in substantial penalties and interest charges.
Ghost Preparers Leave You Holding the Bag
A ghost preparer is someone who prepares your tax return for a fee but refuses to sign it or provide their Preparer Tax Identification Number (PTIN). This seemingly small detail creates enormous legal risk for business owners.
Every paid tax preparer must have a valid PTIN and must sign the returns they prepare. This requirement exists to create accountability and allow the IRS to track preparers who engage in fraudulent practices.
Ghost preparers avoid signing returns because they want to escape responsibility for the fraudulent claims, inflated deductions, or fabricated credits they include on your return. They collect their fee and disappear, leaving you legally liable for everything on that return.
Red flags that identify a ghost preparer include:
Refusing to sign the tax return
Not providing a PTIN when asked
Claiming they can get you a bigger refund than other preparers without reviewing your records
Basing their fee on a percentage of your refund amount
Insisting on depositing your refund into their own bank account
Preparing returns using their own business address instead of yours
Hypothetical example:
A preparer charges you $800 to file your business return and promises a $12,000 refund. The preparer refuses to sign the return or provide a PTIN, claiming this “protects both of us.” After filing, the IRS audits your return and disallows $9,500 in fabricated deductions. You face penalties and interest because your signature is the only one on the return.
Note: Before hiring a tax preparer, verify their credentials through the IRS Directory of Federal Tax Return Preparers with Credentials and Select Qualifications. This free tool confirms whether someone has the required PTIN and any professional credentials.
Form 2439 Abuse Creates Audit Risk
The IRS has identified a significant increase in fraudulent schemes involving Form 2439, which deals with undistributed long-term capital gains from regulated investment companies and real estate investment trusts (REITs).
Scammers promote fake claims on Form 2439, sometimes falsely linking them to legitimate investment funds or REITs. These schemes promise large refunds based on capital gains credits that do not actually exist or that the taxpayer has no legitimate right to claim.
Small business owners who invest through partnerships, S corporations, or hold investment accounts may encounter promoters pushing these schemes. The promoters often use technical language and official-looking documentation to make the fraudulent claims appear legitimate.
The IRS closely scrutinizes Form 2439 claims and cross-references them with records from the investment companies. Fraudulent claims typically result in:
Refund delays while the IRS investigates
Full denial of the claimed credit
Accuracy-related penalties of 20% of the underpayment
Potential civil fraud penalties of 75% if the IRS determines intentional fraud
Business owners should only claim credits on Form 2439 when they receive legitimate documentation from a regulated investment company or REIT showing undistributed long-term capital gains. Do not file this form based solely on advice from a promoter or based on information found on social media.
Phishing and Smishing Remain the Top Attack Method
Email phishing and text message smishing continue to be the most common way scammers steal credentials and financial information from small business owners. The IRS identified over 600 social media accounts impersonating the agency during fiscal year 2025.
These attacks have become increasingly sophisticated. Modern phishing attempts include:
QR codes in emails or texts that direct to fake IRS websites
Links that install malware when clicked
Fake IRS portals that harvest login credentials
Spoofed email addresses that appear to come from IRS.gov domains
Messages claiming you need to verify your account or risk suspension
Small business owners face particular risk because they handle sensitive financial data for both their business and their employees. A successful phishing attack can compromise:
Business bank account credentials
Payroll system access
Employee Social Security numbers and personal information
Business tax identification numbers
Financial statements and tax records
Hypothetical example:
You receive an email appearing to come from the IRS with the subject line “Action Required: Verify Your Business Tax Account.” The email includes a QR code and warns that your account will be suspended in 48 hours if you do not verify. The QR code leads to a fake IRS website that steals your login credentials when you attempt to sign in.
Legitimate IRS communications do not include QR codes or links to external websites. The agency does not send unsolicited emails or texts requesting personal information or account verification.
Note: The IRS communicates primarily through postal mail. If you receive an unexpected email or text claiming to be from the IRS, do not click any links or scan any QR codes. Visit IRS.gov directly by typing the address into your browser if you need to check your account status.
Social Media Tax Advice Drives Fraudulent Filing
Viral tax advice on social media platforms has become a significant source of fraudulent filing schemes. Influencers and self-proclaimed tax experts promote “tax hacks” that sound appealing but violate tax law.
These schemes often target small business owners and self-employed individuals with promises of:
Nonexistent “self-employment tax credits” available to all business owners
Strategies to eliminate self-employment tax entirely
Methods to claim personal expenses as business deductions
Ways to hide income from the IRS
Shortcuts to maximize refunds without proper documentation
The problem with social media tax advice goes beyond simple mistakes. Many promoters know their advice violates tax law but promote it anyway to gain followers, sell courses, or charge consultation fees.
Business owners who follow this advice face serious consequences:
Refund delays while the IRS reviews questionable claims
Audits that examine multiple years of returns
Disallowance of improper deductions or credits
Accuracy-related penalties of 20% of the underpayment
Interest charges that accumulate from the original due date
Potential fraud penalties if the IRS determines intentional wrongdoing
The IRS has specifically warned against relying on broad “self-employment tax credits” promoted on social media. Many small business owners do not qualify for the specific credits these promoters reference, and the IRS is closely reviewing these claims.
IRS Online Account Compromise Threatens Business Data
Criminals increasingly target IRS online accounts to access sensitive taxpayer information and file fraudulent returns. These attacks take two main forms.
First, scammers use stolen personal information to access existing IRS online accounts. Once inside, they can view tax transcripts, change bank account information for refund deposits, and access sensitive data about your business and employees.
Second, criminals pose as helpful individuals or services offering to set up IRS online accounts for business owners. They collect the necessary personal information during the “setup process” and then use those credentials to access the account themselves.
Small business owners should take these steps to protect their IRS online accounts:
Create your own IRS online account directly at IRS.gov rather than waiting for someone to potentially create a fraudulent one
Use strong, unique passwords not used for other accounts
Enable multi-factor authentication when available
Review your account regularly for unauthorized access or changes
Never share your IRS online account credentials with anyone
Be suspicious of anyone offering to “help” set up your IRS account
Hypothetical example:
Someone contacts you offering to expedite your IRS online account setup for a $150 fee. You provide your Social Security number, date of birth, and other personal information. The person creates an account using your information but keeps the login credentials, accessing your tax transcripts and filing a fraudulent return in your name.
Note: Setting up an IRS online account is free and can be done directly at IRS.gov. Do not pay anyone to create an account for you or provide your personal information to third parties claiming they can expedite the process.
Cyberattacks Target Tax Professionals and Their Clients
Small business owners often overlook an indirect but serious threat: cyberattacks targeting their tax professionals and accountants. When a tax preparer’s systems get compromised, criminals gain access to sensitive data for all of their clients.
These attacks typically use spear-phishing emails disguised as legitimate business communications. Common tactics include:
Emails appearing to come from potential new clients requesting services
Messages claiming to contain important documents that require immediate review
Requests to open attachments or click links to view client information
Fake software update notifications for tax preparation programs
When a tax professional clicks a malicious link or opens an infected attachment, malware installs on their system. This malware can:
Steal client tax returns and financial data
Capture login credentials for tax preparation software
Access bank account information for multiple clients
Monitor email communications to identify additional targets
Enable criminals to file fraudulent returns using stolen client data
Small business owners should ask their tax professionals about their cybersecurity practices:
Do they use updated antivirus and anti-malware software?
Do they encrypt sensitive client data?
Do they use secure methods for sharing tax documents?
Do they have procedures for verifying the identity of new clients?
Do they train their staff to recognize phishing attempts?
Consider using secure document sharing platforms rather than email for transmitting sensitive tax documents. Encrypted file sharing services provide better protection than standard email attachments.
The Nonexistent Self-Employment Tax Credit Scam
Promoters aggressively market a supposed self-employment tax credit that does not exist in the broad form they describe. This scam specifically targets small business owners and self-employed individuals.
The scheme typically involves promoters claiming that all self-employed individuals qualify for substantial tax credits, often in the range of $20,000 to $30,000. They may reference legitimate programs like the Employee Retention Credit but misrepresent the eligibility requirements and application process.
The reality is more complex. Most small business owners do not qualify for the specific credits these promoters reference. The Employee Retention Credit, for example, had very specific eligibility requirements related to COVID-19 business disruptions and is no longer available for most tax periods.
Promoters often charge substantial fees to “help” business owners claim these credits. They may charge:
Upfront fees of several thousand dollars
Contingency fees based on a percentage of the claimed credit
Monthly fees for ongoing “consultation” services
The IRS has placed these claims under intensive review. Business owners who file returns claiming credits they do not qualify for face:
Extended processing delays
Detailed audits requiring substantial documentation
Full disallowance of the improper credit
Repayment of any refund received
Penalties and interest charges
Potential promoter penalties if they helped others file fraudulent claims
Business owners interested in exploring legitimate tax credits should consult with a credentialed tax professional who can review their specific situation and determine actual eligibility. Be skeptical of anyone claiming universal eligibility for substantial credits.
How to Verify Your Tax Preparer’s Legitimacy
Choosing a legitimate tax preparer is one of the most important steps small business owners can take to avoid tax scams. Several verification steps can help identify qualified professionals and avoid ghost preparers or fraudulent operators.
Start with the IRS Directory of Federal Tax Return Preparers with Credentials and Select Qualifications. This free online tool allows you to verify:
Whether the preparer has a valid PTIN
Professional credentials such as CPA, Enrolled Agent, or attorney status
State licensing information where applicable
Additional verification steps include:
Check credentials and qualifications. Look for preparers who hold recognized credentials like Certified Public Accountant, Enrolled Agent, or tax attorney. These professionals have met education and testing requirements and are subject to ethical standards.
Verify their PTIN. Every paid tax preparer must have a valid PTIN. Ask to see it before hiring someone. The PTIN should appear on your completed tax return.
Review their history. Check with your state’s board of accountancy or bar association if hiring a CPA or attorney. Look for any disciplinary actions or complaints.
Confirm they will sign your return. Legitimate preparers sign the returns they prepare and provide their PTIN. Refuse to work with anyone who will not sign your return.
Understand their fee structure. Reputable preparers charge fees based on the complexity of your return and the time required. Be wary of preparers who base their fee on a percentage of your refund or who promise larger refunds than other preparers.
Ask about their availability. Choose a preparer who is available year-round, responds promptly to questions, and provides support if the IRS contacts you about a filed return.
If you have concerns about a preparer after hiring them, contact the IRS or your state licensing board for guidance on how to proceed.
Disclaimer:
The Carry Learning Center is operated by The Vibes Company Inc. (“Vibes”) and contains generalized educational content about personal finance topics. While Vibes provides educational content and technology services, all investment advisory services discussed on this website are provided exclusively through its wholly-owned subsidiary, Carry Advisors LLC (“Carry Advisors”), an SEC registered investment adviser. The information contained on the Carry Learning Center should not be construed as personalized investment advice and should not be considered as a solicitation to buy or sell any security or engage in a particular investment, accounting, tax or legal strategy. Vibes is not providing tax, legal, accounting, or investment advice. You should consult with qualified tax, legal, accounting, and investment professionals regarding your specific situation.
The accounts, strategies and/or investments discussed in this material may not be suitable for all investors. All investments involve the risk of loss, and past performance does not guarantee future results. Investment growth or profit is never a guarantee. All statements and opinions included on the Carry Learning Center are intended to be current as of the date of publication but are subject to change without notice.
To access investment advisory services through Carry Advisors, you must be a client of Vibes on an eligible membership plan. For more information about Carry Advisors’ investment advisory services, please see our Form ADV Part 2A brochure and Form CRS or through the SEC’s website at www.adviserinfo.sec.gov.