[mrreality68]

This might help

https://www.irs.gov/privacy-disclosure/report-phishing

It is from IRS website and gives some interesting info

This is the key sentences to me

The IRS doesn't initiate contact with taxpayers by email, text messages or social media channels to request personal or financial information. This includes requests for PIN numbers, passwords or similar access information for credit cards, banks or other financial accounts