TurboTax SMS Scam

Roger Grimes | Mar 4, 2026

It is tax season in the United States and that means plenty of tax scams. I recently received these SMS messages.

I am a TurboTax user, so hey, these might be legit, even though they look scammy.

I first looked up the ttax.us domain using GoDaddy’s Whois service. The ttax.us domain is not valid.

Fact is, scammers would not have sent out a scam message using a non-existent domain, so it probably means that it was taken down. Well, that’s good!

I decided to ask Bing if ttax.us was related to TurboTax. Here’s what I got (shown below):

To be clear, it is not. You cannot trust internet searches to bring you back the truth.

I decided to try using Google and it brought back better results (shown below):

I went to the official TurboTax web and searched on ttax.us. The results are shown below.

Nothing. Nada. I was a little surprised that they did not have a warning about the bogus domain. If you go to an official website of a vendor and put in a domain name and nothing comes back, that probably is not a good sign.

Then I used Microsoft CoPilot (shown below):

Like Google’s return, it had the right answer. I reported the scam SMS messages to my phone provider so that I will not be harassed again.

I was a little disappointed that I could not follow the scam URLs to see what the scammers would ask me for. Microsoft Edge and Google Chrome browsers refused to let me go there (not that I could). I tried using an old IP address I found, and my internet provider blocked me from getting there, saying the domain had been reported as malicious. Well, it’s great that everyone involved in trying to block me from getting there (save the one Bing result). It is nice when the good guys block the bad guys.

Discover Your Organization’s Phish-prone™ Percentage

Ninety-one percent of data breaches begin with spear phishing. Launch our Free Phishing Security Test for up to 100 users to uncover your team's vulnerability and see how your security posture stacks up against industry benchmarks.

Get Your Free Phishing Security Test

Secure the Digital Workforce: Human + AI

KnowBe4 empowers the modern workforce to make smarter security decisions every day. Trusted by more than 70,000 organizations worldwide, KnowBe4 is the pioneer of digital workforce security, securing both AI agents and humans. The KnowBe4 Platform provides attack simulation and training, collaboration security, and agent security powered by AIDA (Artificial Intelligence Defense Agents) and a proprietary Risk Score. The platform leverages 15 years of behavioral data to combat advanced threats including social engineering, prompt injection, and shadow AI. By securing humans and agents, KnowBe4 leads the industry in workforce trust and defense.

Get the latest insights, trends and security news. Subscribe to CyberheistNews.