Identity Theft and Phishing

Did you receive a phone call, e-mail, or letter about your Iowa taxes? How do you know the communication received is actually from the Iowa Department of Revenue?

  • The Department does not initiate contact with taxpayers by e-mail to request personal or financial information. This includes any type of electronic communication, such as text messages and social media.

  • The Iowa Department of Revenue will always identify itself.

  • You will never be asked to provide your full Social Security Number by e-mail.

    • Incorrect spelling and poor grammar may indicate the source of the contact isn’t a professional organization, such as the Iowa Department of Revenue.
       
    • Threats or requests for immediate action are often used in phishing to create a sense of urgency.
       
    • Links or attachments in unsolicited communications may be attached to an email you receive.  They are designed to hack into your computer, steal money, or steal your identity.
       
    • Requests for personal or financial information such as your full Social Security Number, bank account, or credit card information.

  • 1. Do not provide any personal or confidential information.

    2. Contact us directly and we will confirm whether the communication you received was from the Iowa Department of Revenue:
    Send an email to: idr@iowa.gov or call 515-281-3114

    To further protect your personal information, the Department requires you to copy the three questions below into any e-mail requesting confidential tax information and answer them. We will respond to a request for confidential information only after your authorization is received.

    • Do you authorize the Iowa Department of Revenue to e-mail the confidential information you may request?
    • To what e-mail address do you want us to send confidential information? 
    • Do you acknowledge that e-mail transmissions are not always secure?
       

    If you believe you have been scammed by someone pretending to work for the IRS, send an email to Phishing@IRS.gov.  Also visit the IRS Identity Protection page online.