IRS Warns of New Crypto Phishing Scam Using QR Codes

The IRS flagging a physical-mail vector is notable because most crypto phishing warnings focus on email, social media or fake exchange sites, so the use of printed letters with QR codes signals attackers adapting to channels where users may extend more trust. The targeting of private keys, rather than login credentials, raises the stakes: a single successful scan can mean irreversible loss, with no exchange or bank to reverse it. Taxpayers filing or corresponding with the agency are the immediate audience, but the same QR-code tactic can be repurposed by anyone impersonating an official body. Whether this becomes a broader campaign or stays isolated is the open question.