Verified sender Published Aug 20, 2026

Who is texting me from 41593?

Bewary fraud research, published by Andrey Khayrullaev, founder. How we research scam patterns.

Example text from 41593

ITR: Reply HELP for help or STOP to cancel. For assistance contact info@irsissues.org. Msg&data rates may apply. This is not an IRS tax account notice.

REAL

41593 is legitimate, not IRS. The structural tell is the HELP identity: the code names ITR and gives info@irsissues.org as its contact route. IRS says its text short codes are 91040 and 34381, so a 41593 message that claims to freeze your IRS refund is changing the sender role midstream.

Operated byITR (irsissues.org)

What real messages from 41593 do

Identifies the program as ITR when you send HELP to 41593. That is the anchor on this code, because the identity returned by the code is not Internal Revenue Service.
Gives info@irsissues.org as the support contact in the HELP path. A normal 41593 support exchange points back to that operator route, not to a new tax agent, a mobile payment handle, or a one-day inbox.
Handles opt-out language through STOP and help language through HELP. For 41593, those commands should only confirm program control and support identity, not open an IRS refund interview inside the text thread.
May use IRS Issues style branding. Read that as a private sender label tied to irsissues.org, not as a federal tax notice, even though the wording sits close to IRS language.
Can send administrative campaign copy tied to the ITR program. The clean version does not need your full Social Security number, IRS online account password, or filing PIN to explain why your phone number received the text.

How a fake 41593 differs

It says 41593 is the IRS. Wrong code map. IRS names 91040 and 34381 for its texts, while 41593 returns ITR through HELP.
It claims a refund, lien, levy, or garnishment is being decided inside the text session. That mismatch matters: a private ITR short code cannot become an IRS collection desk just because the body says "Final notice."
It uses a timer built around tax fear, such as "refund expires in 30 minutes" or "pay $487.22 today to stop a lien." The script pushes you to accept 41593 as IRS before you check the code identity.
It sends you to a tax lookalike domain shaped like irs-refund-secure.com, irsissues-pay.com, or irs.gov.refund-claim.top. The trick is placement: the IRS word appears early, while the registered domain is not the IRS.
It asks for IRS-specific secrets: full SSN, IRS online account password, filing PIN, or last year's adjusted gross income. Those are tax account recovery keys, not details needed to read an ITR short-code support reply.
It asks for payment by gift card, crypto, wire, Zelle, Cash App, Apple Pay, or prepaid debit card to stop an IRS action. That is the tell in tax impersonation: the fake collector needs money rails that do not look like normal tax payment records.
It arrives from a regular ten-digit number, iMessage, WhatsApp, or email while quoting 41593 in the body. That delivery path is not the registered short code. It is a prop.
It cannot keep the ITR and IRS roles straight. One line says ITR, the next says IRS Refund Center, the link says tax compliance portal, and the signature names a made-up officer. That wobble is the scam trying to borrow trust from both names.

What to do now

Start with the code identity. If the message claims to be an IRS text, compare the sender with the IRS published short codes named in the research: 91040 and 34381. 41593 maps to ITR, not IRS.
Treat refund, lien, levy, garnishment, audit, and account-hold claims from 41593 as a sender mismatch. Read the message as ITR traffic unless you confirm otherwise through a route outside the text body.
Send HELP to 41593 only to confirm the program label. The known HELP identity gives ITR and info@irsissues.org. Do not answer any follow-up with your SSN, filing PIN, IRS account password, or bank routing details.
For questions about why 41593 contacted you, use the operator route tied to the code: info@irsissues.org. Ask what campaign sent the message, what consent they have for your number, and how they will remove it if you did not opt in.
For IRS impersonation, forward the details to phishing@irs.gov. Include the sender code or number, the full message text, the date, the time, your time zone, and the phone number that received it.
If you typed tax credentials, payment details, or identity documents into a linked page, contain the tax account exposure first. Change the affected account password from a clean session, save the message and landing page address, dispute any charge with the payment provider, and send the IRS impersonation report to phishing@irs.gov.

Got a text you are unsure about?

Paste it here. Bewary reads it and tells you straight, free.

Sources

What this page checks against.