The IRS has warned cryptocurrency holders about an ongoing U.S. mail-based phishing campaign involving counterfeit letters for a nonexistent "Digital Asset Compliance Portal." The notices imitate IRS correspondence, cite tax years from 2017 through 2026, include fabricated notice numbers and urgent enrollment deadlines, and use QR codes to direct recipients to a fake IRS website. The site may seek personal identification details, crypto-holding estimates, exchange credentials, wallet information, recovery phrases or private keys. The IRS said it does not operate the portal and does not request recovery phrases, private keys or immediate digital-asset transfers. The agency issued its formal alert on July 30, 2026, but recipients continued reporting the letters in mid-to-late August. Coinbase and DarkTower traced the campaign infrastructure to a recently registered domain hosted in Romania and networks previously associated with financial phishing operations. The IRS advises recipients not to scan the QR code, call numbers on the notice or share information, and instead to verify communications through IRS.gov or published agency phone numbers.