Odaily Planet Daily report: On July 30, the U.S. Internal Revenue Service (IRS) issued a fraud alert, warning that scammers are mailing forged IRS notices demanding cryptocurrency holders register via a non-existent “Digital Asset Compliance Portal” by an urgent deadline. Each fraudulent letter includes a QR code that directs recipients to a counterfeit website mimicking IRS.gov. This fake portal may request personal information, cryptocurrency wallet details, exchange login credentials, seed phrases, private keys, or other data usable for theft.
The cryptocurrency exchange Coinbase and cybersecurity firm Darktower traced the underlying infrastructure to a domain registered shortly before the phishing campaign through a Hong Kong-based registrar. Investigators found that the website was hosted in Romania, on a network previously associated with phishing pages impersonating financial institutions.


