The Great Pretender: How AI Makes Tax Scams Look Legit

ARTICLE | March 30, 2026

Authored by Aprio

Summary: Tax season demands immense focus and increased pressure. Unfortunately, this intensity can leave business leaders, and their employees open to fraud exposure. AI has upgraded tax scams from obvious phishing attempts to hyper-personalized emails, cloned-voice calls, and deepfakes, resulting in higher risk of misdirected payments, stolen data, and compromised filings.

Tax Season is High-Stakes, AI Is Increasing the Risk

Tax season already strains teams juggling complex reporting, cross-border obligations, and growth planning. This heightened pressure creates an opening for cybercriminals to exploit.

With the rapid advancement of artificial intelligence (AI), traditional fraudulent schemes have evolved into highly sophisticated, targeted attacks, leading to significant financial loss, stolen personal information, and compromised tax filings.

Today’s perpetrators no longer rely on poorly worded emails or generic phone calls. Instead, they leverage generative AI, voice cloning, and deepfake technology to create compelling, hyper-personalized communications that mimic trusted colleagues, reputable tax preparers, and official government agencies.

Understanding how these AI-driven threats operate is important for maintaining robust security and supporting the long-term success of your business.

The Evolution of Fraudulent Schemes in the Age of AI

In previous years, identifying a tax scam was often a straightforward process. Phishing emails were typically riddled with spelling errors, awkward grammar, and generic greetings. Fraudulent phone calls featured automated, robotic voices demanding unusual payments. While these tactics still exist, AI has fundamentally changed the landscape of tax-related fraud, giving criminals the tools to operate with unprecedented sophistication and scale.

Generative AI platforms help scammers draft flawless, highly persuasive emails and text messages. By scraping publicly available data from corporate websites, social media profiles, and press releases, these tools can generate messages that reference specific company events, recent acquisitions, or actual team members. This level of personalization makes spear phishing campaigns incredibly difficult to distinguish from legitimate business communication.

Additionally, cybercriminals can now translate their schemes into multiple languages with perfect fluency, craft convincing fake websites that closely mirror legitimate IRS portals, and automate thousands of targeted attacks simultaneously. For businesses, this means the volume and the quality of incoming threats has increased substantially.

High-Stakes Targets: Why Business Leaders Are in the Crosshairs

While individual taxpayers are certainly targeted during tax season, business leaders face a distinct set of risks. Criminals understand that business executives, founders, and portfolio company operators control access to highly valuable assets, such as sensitive corporate financial data, large cash reserves, and the personal information of hundreds or thousands of employees.

• Tax season creates urgency. Teams are moving quickly, inboxes are overloaded, and payments, filings, and document requests are routine. This pressure can shorten verification steps and create an opportunity for scammers to sneak through your company defenses.
• Executives are prime impersonation targets. Leadership roles involve quick approvals and review. With AI, scammers can mimic an executive’s writing style and use voice cloning and deepfakes to “confirm” a request on a call.
• Scammers focus on high-impact outcomes. Common objectives include redirecting payments, collecting credentials for finance/HR systems, and gathering sensitive documents such as W-2s, payroll files, etc. Once obtained, that data can lead to identity theft and future targeted attacks.
• Complexity increases the reach of an attack. Multi-entity structures, cross-border activity, and acquisitions add more filings, more signers, more advisors, and more reasons for last-minute, quick turnaround requests. Each of these is an opportunity for a well-timed, AI-generated message to sneak through.

Four Major AI-Powered Tax Scams to Watch

To effectively mitigate risk within your organization, you must understand the specific tactics being deployed. Here are the four most prominent AI-driven tax scams currently circulating:

1. Deepfakes and Voice Cloning Impersonation

One of the most concerning developments in AI is the accessibility of voice cloning technology. Scammers only need a brief audio snippet of a CEO, board member, or lead investor to create a highly accurate synthetic voice.

During tax season, a finance director might receive a phone call from what sounds exactly like their CEO, requesting an urgent transfer of funds to a “new tax advisory firm” or asking for the immediate transmission of employee payroll records. Because the voice sounds authentic, the target is far more likely to comply without verifying the request through other channels.

2. Hyper-Realistic Phishing and Spear Phishing

AI-generated phishing emails have moved beyond generic warnings. Scammers now use AI to craft messages that perfectly mimic the tone, formatting, and signature blocks of your actual CPA firm or internal tax department.

These emails often claim there is an issue with your tax return, a discrepancy in a recent filing, or a mandatory update to your payment portal. They typically include a link to a fake website designed to collect your login credentials, multi-factor authentication codes, or sensitive corporate data. Once the scammers have this information, they can access legitimate accounts to steal refunds or commit broader identity theft.

3. Fake Tax Preparers and “Ghost” Advisors

AI allows scammers to create entirely fabricated, professional-looking tax advisory firms. They build polished websites with AI-generated headshots of non-existent partners, publish AI-written blog posts demonstrating fabricated knowledge, and run targeted social media campaigns offering to handle complex filings like the Employee Retention Credit (ERC) or state-and-local tax (SALT) obligations.

These “ghost preparers” often promise unusually high refunds or guaranteed compliance outcomes. In reality, they collect your sensitive financial data, charge exorbitant fees, and often file fraudulent returns that leave the taxpayer liable for penalties and interest.

4. Automated Text Messages (Smishing)

Scammers increasingly use AI-automated text messaging to target executives on their mobile devices. These messages often spoof the caller ID of the IRS or state tax authorities, creating a sense of urgency about a pending tax lien or a seized refund. Because people generally read text messages more quickly and with less scrutiny than emails, threat actors use these alerts to trick targets into clicking malicious links or calling fraudulent support numbers where they are pressured into handing over personal information.

Because AI makes fraudulent communications look and sound remarkably authentic, identifying a scam requires a disciplined approach and an awareness of subtle red flags.

• Uncharacteristic Urgency: Legitimate tax agencies and professional advisors generally communicate methodically. If you receive a message demanding quick action under the threat of aggressive penalties, law enforcement involvement, or frozen accounts, view it with high suspicion. Scammers manufacture crises to force errors in judgment.
• Anomalies in Payment Requests: The IRS and reputable tax preparers will never ask for payment via cryptocurrency, wire transfers to unverified international accounts, or gift cards. Any request to route funds outside of established, verified payment portals is a significant warning sign.
• Subtle Discrepancies in Contact Details: While an AI-generated email might read perfectly, the sender’s email address might contain a tiny variation from the legitimate domain. For example, using “.co” instead of “.com” or swapping a lowercase “L” for a number “1.”
• Deviations from Standard Procedures: If your CPA typically communicates tax return updates through a secure client portal, but you suddenly receive an email with a direct PDF attachment asking for a signature, pause and verify. Scammers often try to bypass established secure workflows.
• Overly Smooth or Evasive Interactions: If you are speaking with someone on the phone and their responses seem slightly delayed, overly scripted, or evasive when asked specific, context-heavy questions about your business history, you may be dealing with a cloned voice or an AI-assisted fraudster.

Protecting your personal information and your company’s financial integrity requires a combination of robust internal controls, continuous education, and reliable partnerships. Here are practical steps to help secure your data this tax season.

• Implement Out-of-Band Verification. Never trust a single channel of communication for high-stakes requests. If an email “from your CFO” asks for tax documents or an urgent wire transfer, call them on a known, trusted phone number to confirm. Establish a standard practice of verifying requests through a secondary, independent channel to mitigate the risk of voice cloning and email spoofing.
• Strengthen Internal Controls and Technology. Work with your IT and finance departments to mandate stringent security protocols. Multi-factor authentication should be required for all financial accounts, payroll systems, outgoing payments, transmissions of sensitive employee data, and communication platforms. By requiring multiple sets of eyes on significant transactions, you reduce the chances of a single compromised employee falling victim to a scam.
• Foster a Culture of Blameless Problem-Solving. Your team members are your first line of defense. Educate them continuously on the latest AI-driven tax scams, highlighting how these threats mimic legitimate business operations. More importantly, create an environment where employees feel comfortable questioning unusual requests, even if those requests appear to come from the CEO or a senior partner. If an employee does click a suspicious link, encourage them to report it promptly without fear of immediate reprimand. Quick reporting is vital for addressing breaches before they escalate.
• Secure Your Tax Identity. Business leaders should proactively secure their own personal tax identities as well as their corporate filings. Register for an official online account directly with the IRS to monitor your tax records and track your filings. Consider applying for an Identity Protection PIN (IP PIN), a six-digit number assigned to eligible taxpayers that helps guard against the fraudulent filing of tax returns using your social security number.
• Rely on Verified, Established Professionals. In a landscape flooded with convincing fake websites and AI-generated marketing, careful vetting of external partners is essential. Do not engage with unknown tax preparers who reach out unsolicited via social media or email. Instead, build enduring relationships with established advisory firms that have a proven track record of integrity, deep industry experience, and transparent, secure communication protocols.

Final Thoughts: Staying Ahead of AI Tax Scams

The intersection of tax compliance and AI presents a challenging environment for any business leader. The tactics used by scammers will only continue to grow in sophistication, making it harder to distinguish legitimate correspondence from highly engineered fraud. However, you don’t have to navigate these complex challenges alone. Partnering with a dedicated tax advisor can help you stay informed on evolving threat and, bring valuable perspective and guidance to your financial operations.

Please connect with your advisor if you have any questions about this article.

---

This article was written by Aprio and originally appeared on 2026-03-30. Reprinted with permission from Aprio LLP.
© 2026 Aprio LLP. All rights reserved. https://www.aprio.com/insights-events/the-great-pretender-how-ai-makes-tax-scams-look-legit-ins-article-tax/

“Aprio” is the brand name under which Aprio, LLP, and Aprio Advisory Group, LLC (and its subsidiaries), provide professional services. LLP and Advisory (and its subsidiaries) practice as an alternative practice structure in accordance with the AICPA Code of Professional Conduct and applicable law, regulations, and professional standards. LLP is a licensed independent CPA firm that provides attest services, and Advisory and its subsidiaries provide tax and business consulting services. Advisory and its subsidiaries are not licensed CPA firms.

This publication does not, and is not intended to, provide audit, tax, accounting, financial, investment, or legal advice. Any tax advice contained in this communication (including any attachments) is not intended or written to be used, and cannot be used, for the purpose of (i) avoiding penalties under the Internal Revenue Code or under any state or local tax law or (ii) promoting, marketing or recommending to another party any transaction or matter addressed herein. Readers should consult a qualified tax advisor before taking any action based on the information herein.