
How Your Startup Can Avoid the 2026 IRS Dirty Dozen Scams
The 2026 IRS Dirty Dozen (IR-2026-30, released March 5, 2026) has seven entries that can reach a startup: email and text impersonation, AI-enabled phone impersonation, IRS online account takeover, the bogus Self-Employment Tax Credit, ghost preparers, spear-phishing and Offer in Compromise mills. Employee Retention Credit schemes are not on the 2026 list, though the IRS still had about 13,000 ERC claims unresolved in early October 2026. The defense is to open your own IRS Business Tax Account, verify every contact there, pay through EFTPS or Direct Pay (both free) or a payroll provider such as Gusto that you audit quarterly, and report fakes to phishing@irs.gov or TIGTA at 800-366-4484. Paid tools such as 1Password ($24.95 a month for 10 users) and Inkle (Form 1120 from $650 a year) close specific gaps but do not detect scams.
Updated 2026-10-12






































































