The US IRS warns of a new type of cryptocurrency phishing attack: forged letters use QR codes to steal private wallet keys
According to CoinDesk, according to CoinDesk, the US Internal Revenue Service (IRS) issued a warning that an advanced email phishing campaign targeting US cryptocurrency holders is spreading. By falsifying official tax letters, attackers induce users to scan malicious QR codes to steal encrypted wallet credentials and private keys. According to reports, the attackers impersonated the IRS to send paper letters, used names such as “tax compliance” and “account verification” to create a sense of urgency, and attached QR codes to the letters. Once scanned, users may be directed to a counterfeit website, which in turn leaks wallet login information, mnemonic words, or private keys, leading to the theft of digital assets. The IRS reminds taxpayers that official agencies will not require users to provide private cryptographic wallet keys, mnemonics, or perform similar “wallet verification” operations through unofficial channels. Cryptocurrency holders should be wary of any suspicious emails and letters asking to scan QR codes, connect to wallets, or submit sensitive information. As the number of crypto asset holders expands, social engineering attacks on digital wallets continue to increase, and regulators and security agencies are stepping up prevention reminders about related fraudulent activities.
