Learn about scams

← All companiesJobs, housing & money admin#51 most impersonated

Intuit TurboTax scams

Last updated September 19, 2026

The short answer

TurboTax scams are emails about a refund on hold or an account problem that lead to a fake login. A TurboTax account contains your full return — Social Security number, employer, dependants, bank details — which makes it one of the most valuable accounts you own.

A completed tax return is the most complete identity document most people ever produce: Social Security numbers for the whole household, employment and income history, bank account details, and dependants' details. It all sits in one account behind one password, and tax season is exactly when people expect email about it. That combination makes TurboTax account phishing unusually high-value per successful attempt.

How Intuit TurboTax scams work

  1. 1

    Refund hold and account phishing

    An email says your refund is on hold or your account needs verification, linking to a fake TurboTax or IRS login page.

  2. 2

    Credential stuffing at filing time

    Reused passwords are tried against TurboTax accounts during filing season, when a successful login yields a complete, current return.

  3. 3

    Fraudulent returns filed in your name

    With your details, a return is filed early claiming a refund to the attacker's account. You discover it when your own return is rejected as a duplicate.

  4. 4

    Fake support numbers

    Search ads for TurboTax support lead to operators who request remote access to "fix" a filing problem.

Warning signs

  • An email says your refund is on hold and links to a login
  • Your e-filed return is rejected because one was already filed
  • A login page is not on turbotax.intuit.com
  • A support number was found in a search ad
  • You are asked for remote access to fix a filing issue
  • A message about your return arrives from the "IRS" (they do not email)
  • Account activity shows a return you did not prepare

Examples

The duplicate return

A filer's return is rejected in March because one was already filed with his Social Security number in January, claiming a $7,100 refund to an account he does not own. The data came from a TurboTax account accessed with a password reused from an unrelated breach.

Refund on hold

An email headed "Your refund has been placed on hold" links to a convincing TurboTax login. The account opened contains three years of returns for a family of four — Social Security numbers, employers, dependants, bank details. Everything needed for years of fraud, in one place.

What to do

  • Use a unique, strong password on your tax account and turn on two-factor authentication.
  • Check refund status only at irs.gov/refunds. The IRS never emails about it.
  • Get an IRS Identity Protection PIN — it blocks fraudulent returns in your name.
  • File early. The fraudulent return usually wins by being first.
  • Never grant remote access to a tax support caller.

Report it to Intuit TurboTax

Report phishing to spoof@intuit.com and secure your account at security.intuit.com. Report tax identity theft to the IRS with Form 14039.

Our step-by-step guide: Intuit / TurboTax

Getting your money back

If a fraudulent return was filed in your name, file IRS Form 14039 (Identity Theft Affidavit) and submit your real return on paper — the IRS has a dedicated unit for this and it does get resolved, though slowly. Request an Identity Protection PIN to prevent a repeat next year. Secure the TurboTax account: change the password, turn on two-factor, and review stored returns for changes. Then freeze your credit at all three bureaus, because a compromised return exposes the whole household, including children, whose credit files are rarely checked.

Frequently asked questions

Why is a tax account such a valuable target?

Because a return contains everything: Social Security numbers for the household, employer and income history, bank account and routing numbers, and dependants' details. It is the single most complete identity document most people produce, and it is behind one password.

What happens if someone files a return in my name?

Your own e-filed return is rejected as a duplicate. You file Form 14039, submit your return on paper, and the IRS investigates — you do eventually receive your correct refund, but it takes months. An Identity Protection PIN prevents a repeat.

Does the IRS ever email about refunds?

No. The IRS initiates contact by post. It does not email, text or message about refunds, holds or audits. Any such message is phishing, and checking irs.gov/refunds yourself settles it in under a minute.

Other companies scammers impersonate

Scams reuse their scripts across brands. If you were contacted about Intuit TurboTax, these are the guides worth reading next.

See all companies