Wednesday, June 17 2026  |  Cofense Threat Intelligence Insights

Elon Musk, the IRS, and Your Bank Account: Anatomy of a Multi-Stage Financial Scam

This report analyzes a sophisticated IRS-themed phishing campaign that uses Elon Musk and a fake “Dogecoin Initiative” to lure victims with a promised $5,000 tax refund, then funnels them through credential harvesting and a fraudulent cryptocurrency platform. The attackers collect extensive personally identifiable information, including addresses, employment details, government-issued IDs, bank account and routing numbers, and account credentials, enabling identity theft, account takeovers, social engineering, and potential direct financial fraud. The scam further attempts to extract Bitcoin payments through a fake investment scheme while maintaining victim trust with fabricated platform activity and live support interactions, making it a multi-stage operation designed to maximize both data theft and financial