Search form

eFile & Pay

Identity Theft and Phishing

Did you receive a phone call, e-mail, or letter about your Iowa taxes? How do you know the communication received is actually from the Iowa Department of Revenue?

  • The Department does not initiate contact with taxpayers by e-mail to request personal or financial information. This includes any type of electronic communication, such as text messages and social media.

  • The Iowa Department of Revenue will always identify itself.

  • You will never be asked to provide your full Social Security Number by e-mail.

Phishing Warning Signs:

  • Incorrect spelling and poor grammar may indicate the source of the contact isn’t a professional organization, such as the Iowa Department of Revenue.
  • Threats or requests for immediate action are often used in phishing to create a sense of urgency.
  • Links or attachments in unsolicited communications may be attached to an email you receive.  They are designed to hack into your computer, steal money, or steal your identity.
  • Requests for personal or financial information such as your full Social Security Number, bank account, or credit card information.

If you are unsure the communication you received is from the Iowa Department of Revenue:

1. Do not provide any personal or confidential information.
2. Contact us directly and we will confirm whether the communication you received was from the Iowa Department of Revenue:
Send an email to: idr@iowa.gov or call 515-281-3114

To further protect your personal information, the Department requires you to copy the three questions below into any e-mail requesting confidential tax information and answer them. We will respond to a request for confidential information only after your authorization is received.

  • Do you authorize the Iowa Department of Revenue to e-mail the confidential information you may request?
  • To what e-mail address do you want us to send confidential information? 
  • Do you acknowledge that e-mail transmissions are not always secure?

Also visit the IRS Identity Protection page online.