Have you ever been two paychecks from not making rent and then stumbled across a website telling you the IRS owes you thousands of dollars you never knew about? That exact moment — equal parts hope and desperation — is precisely what tax scammers are counting on. When Andre Ochoa reached out to Check Day America in early March 2026, he had just lived through a version of that moment, and he wanted other people to hear what happened before it happened to them.
Andre had read a story I published in January about refund delays hitting low-wage earners hardest. He sent a message through our contact page that same night. “Your article described my life exactly,” he wrote. “But I have something worse to tell you.” We arranged a phone call for the following week, and over the course of about ninety minutes, Andre walked me through the two weeks in February 2026 that he says aged him five years.
A Budget Built on Thin Ice
To understand why a fake website promising a large refund could work on someone like Andre Ochoa, you have to understand what his financial life actually looks like. Andre is 51 years old and has driven for UPS out of a Cleveland hub for going on nine years. His base pay runs roughly $38,000 a year, but overtime and route assignments fluctuate week to week. Some weeks he clears $900 after taxes. Other weeks, closer to $600.
His fiancée, Delia, is finishing a nursing program at a community college. She works part-time at a pharmacy, bringing in around $800 a month when her class schedule allows. Together, they are raising almost no margin for error. Rent on their two-bedroom apartment in Cleveland’s Old Brooklyn neighborhood runs $1,175 a month. Andre told me he keeps a small notebook where he tracks every bill by due date — not because he is meticulous by nature, but because he cannot afford to forget anything.
In previous years, Andre’s federal refund had ranged between $1,800 and $2,600, depending on overtime and whether he had any deductible expenses. He files every year in February, as soon as his W-2 arrives. The refund, he told me, typically goes straight toward catching up on bills or padding a small emergency fund that he and Delia treat as untouchable. Last year, $800 of it paid for a car repair that would have otherwise meant missed shifts.
The Website That Promised $6,800
In the first week of February 2026, Andre was searching online for information about whether delivery drivers could deduct work-related expenses. He had seen a social media post suggesting that a recent piece of legislation had expanded deductions available to hourly workers. The post included a link to what appeared to be a tax calculator. He clicked it.
The website looked, by Andre’s description, almost indistinguishable from a government resource. It used muted blue and white colors, displayed official-looking seals, and included language about “your rights under the new tax law.” The calculator asked for his filing status, annual income, and a few questions about his job type. Within seconds, it displayed a number: $6,847 in estimated federal refund eligibility.
“I stared at that number for a long time,” Andre told me. “Part of me knew it was too good. But another part of me thought — what if I really have been leaving money behind all these years? What if I just didn’t know?” That tension — the reasonable hope that the number might be real — is exactly what makes these sites dangerous. The site then prompted him to enter his full name, date of birth, address, and Social Security number to “unlock” his personalized refund report.
He typed in his name and address. His finger was hovering over the Social Security number field when something made him stop. He looked at the URL bar at the top of his browser for the first time.
The Red Flag Hidden in Plain Sight
The web address did not end in .gov. It ended in a string of characters Andre described as “official-sounding but weird” — a domain that mimicked IRS language without being connected to the agency in any way. He told me he almost didn’t check. “I was focused on that number,” he said. “That’s the trick, right? Get you looking at the prize so you don’t look at the door.”
Andre closed the browser tab and spent about an hour searching for the credit the social media post had referenced. He could not find it on any .gov source. He navigated to IRS.gov’s tax credits and deductions page directly and found nothing matching the claims the fake calculator had made. He forwarded the URL of the suspicious site to [email protected], the IRS’s official reporting address for fraudulent tax resources, and then closed his laptop.
As noted by NewsNation’s reporting on fake tax calculators, the IRS has specifically warned that some scammers reference new or recent legislation by name to make their fake credit claims appear legitimate. The tactic works because most people have no way of quickly verifying whether a specific credit exists without already knowing where to look.
Why Workers Like Andre Are Targeted
The profile of a person most vulnerable to this type of scam is not someone careless or uninformed. It is someone under genuine financial pressure who has a reasonable belief that they might be missing something in the tax code — because, statistically, many low- and moderate-income workers are. The Earned Income Tax Credit alone is left unclaimed by eligible taxpayers at a notable rate each year, and legitimate credit expansions do occur.
Andre told me he felt embarrassed initially when he realized what he had almost done. I want to be clear in how I report this: there was nothing naive about his response to that website. It was sophisticated, targeted, and built specifically to exploit the gap between what a worker thinks they might be owed and what they can easily verify. “I’m not dumb with money,” he told me. “But I am tired, and I am stretched. And these people know that.”
Tax identity theft, the IRS has documented, can delay a legitimate refund by months. In some cases, victims must file a paper return, complete IRS Form 14039 (Identity Theft Affidavit), and wait through a review process that can stretch beyond a year. For someone in Andre’s position — where a refund represents a genuine financial lifeline — that delay is not an inconvenience. It is a crisis.
Filing the Right Way and Getting the Real Number
After the close call, Andre filed his 2025 federal return through IRS Free File, the program available to taxpayers with adjusted gross income under $84,000. He used a vetted tax software provider listed directly on IRS.gov’s refund and filing resources. His actual refund, based on his W-2 income, withholding, and the Earned Income Tax Credit he legitimately qualified for, came to $2,411.
It was not $6,847. It was not the number that had briefly made him feel like a different kind of year was possible. But it was real, and it was his. He filed electronically on February 14th, 2026, and selected direct deposit. The IRS accepted his return within 48 hours. The refund landed in his checking account on March 7th — twenty-one days after filing, well within the IRS’s standard processing window for electronic returns.
He used $1,200 of the refund to pay down a credit card carrying a high interest rate that had crept up during a slow overtime period in November. The remaining $1,211 went into savings. Delia, he told me, is expected to finish her nursing program by December. “After that,” he said, “things are going to change. But right now we’re still in the in-between.”
What Andre Wants Other Workers to Know
Before we ended our call, I asked Andre what he would say to someone who found themselves staring at the same fake calculator he had encountered. His answer was immediate and specific. “Check the web address before you type a single letter,” he said. “If it doesn’t say .gov, close it. I don’t care how good the number looks.”
He also said he had shared the IRS’s phishing email address — [email protected] — with several coworkers at his UPS hub, after word spread that he had nearly been caught in a scam. Two of them told him they had seen similar sites. One had already entered partial information before stopping. That person, Andre said, had to spend several hours on the phone with the IRS to flag a potential identity theft alert on their account.
Reporting scams, even ones you escaped, matters. The Treasury Inspector General for Tax Administration tracks complaint volume to identify active fraud campaigns, and individual reports can help shut down sites faster. It takes less than five minutes, and Andre told me it felt like the one concrete thing he could do after feeling powerless during those few seconds he almost gave a stranger his Social Security number.
I left our conversation thinking about the notebook Andre keeps — the one with every bill listed by due date. There is something quietly exhausting about having to manage every dollar that carefully, and something genuinely infuriating about the fact that the people who design these scam sites understand that exhaustion intimately. They build their tools for people who are too tired to double-check everything, and then they wait. Andre checked. This time, it was enough.
Leave a Reply