Receiving an unexpected communication from the Bureau of Internal Revenue (BIR) can create immediate stress, especially when it mentions audits, tax deficiencies, penalties, or urgent action. Many Filipinos—whether running small businesses, working as professionals, or living overseas—receive letters, emails, or even text messages that look official but may be fraudulent. Scammers have grown sophisticated at copying BIR branding to steal personal data, banking details, or money. At the same time, the BIR legitimately issues various notices as part of its tax administration duties. This article explains exactly how to tell the difference, the legal rules that govern real BIR notices, a practical step-by-step verification process, common scam patterns, and what to do next so you can protect your rights and avoid unnecessary problems.

What Legitimate BIR Notices Typically Contain

The BIR issues several types of official communications. The most common ones that cause concern are:

Letter of Authority (LOA): Authorizes specific revenue officers to examine your books of accounts and other records for a defined period, usually in connection with an audit. It must state the taxpayer’s name and TIN, the tax types and periods covered, the names of the authorized examiners, and the validity period (commonly 120 days, subject to extension under applicable rules).
Preliminary Assessment Notice (PAN) or Notice of Discrepancy: Informs you of proposed deficiency taxes (such as income tax, VAT, or withholding tax) and gives you the chance to explain or submit documents before a final assessment.
Formal Letter of Demand (FLD) and Final Assessment Notice (FAN): Demands payment of assessed deficiency taxes, penalties, and interest after the PAN stage. It must clearly state the facts, the specific legal provisions, and the computation.
Other notices: Compliance letters requesting documents, reminders for unfiled returns, or requests for clarification.

A genuine notice on paper almost always appears on official BIR letterhead with the BIR logo and seal, uses high-quality printing, includes your correct full name, TIN, registered address, and a clear reference or case number. It is signed by an authorized official (usually the Revenue District Officer, Assistant Regional Director, or higher) with the signatory’s printed name and designation below the signature. Contact details of the issuing Revenue District Office (RDO) or regional office are provided. The content explains the factual and legal basis in detail, consistent with due process requirements.

For emails, legitimate BIR communications come from official addresses ending in @bir.gov.ph or from verified RDO email accounts. The BIR may send certain notices or acknowledgments electronically when you have registered an official email address through BIR Form 1905 or when you file returns through eBIRForms or eFPS (as clarified in Revenue Memorandum Circular No. 131-2022). However, the BIR does not typically initiate high-stakes assessment notices solely through unsolicited email without prior context or registration.

Legal Requirements BIR Must Follow

Under Section 228 of the National Internal Revenue Code of 1997 (as amended), the BIR must observe due process before issuing a deficiency tax assessment. The taxpayer must receive written notice of the law and facts on which the assessment is based and must be given a genuine opportunity to respond. Failure to comply with these requirements can render the assessment void.

Revenue Regulations No. 12-99, as amended by RR No. 18-2013, governs how notices must be served:

Personal delivery to the taxpayer or a duly authorized representative (who must acknowledge receipt in writing, indicating name, signature, designation, and date).
Substituted service (when the taxpayer is absent, the notice may be left with a clerk or person in charge at the registered address, witnessed by barangay officials and two disinterested persons).
Service by mail (registered mail with instructions to return after ten days if undelivered, or through a reputable courier; ordinary mail only as a last resort in areas without registry service).

The Supreme Court has repeatedly emphasized strict compliance with these service rules. Improper service—such as delivery to an unauthorized person like a security guard without proper acknowledgment—can invalidate the assessment (see, for example, principles affirmed in cases interpreting RR 12-99 and RR 18-2013).

Electronic service to a taxpayer’s registered official email address is recognized in certain circulars and is presumed valid when properly effected. The BIR’s digital tools, including the REVIE chatbot launched under Revenue Memorandum Circular No. 5-2026, now allow taxpayers to verify Letters of Authority directly on the official website.

These rules apply equally to individual taxpayers, corporations, and foreigners who have Philippine tax obligations (for example, Philippine-sourced income or business activities in the country). Foreigners or overseas Filipinos may receive notices at their last registered Philippine address or through an authorized representative holding a duly notarized and, where required, apostilled Special Power of Attorney.

Step-by-Step Guide to Verify Any BIR Notice or Email

Follow these steps in order. Never rush into payment or disclosure of sensitive information.

Stay calm and do not engage immediately. Scammers create artificial urgency (“pay today or face arrest,” “account will be suspended”). Real BIR processes follow fixed legal timelines, such as 15 days to respond to a PAN under the regulations.
Inspect the document or email carefully.
- Look for spelling or grammatical errors, low-quality logos, or mismatched formatting—these are common in fakes.
- Verify that your TIN, name, and address exactly match your BIR records (check via the Online Registration and Update System at orus.bir.gov.ph if enrolled).
- Confirm the reference number, signatory’s name and title, and issuing office details.
For emails specifically:
- Check the actual sender address (hover or inspect the full header). It must be from a verified @bir.gov.ph domain or an official RDO account.
- Do not click any links or open attachments. Instead, manually type www.bir.gov.ph into your browser.
- Legitimate BIR emails rarely ask you to log in, provide OTPs, or transfer money to personal accounts or e-wallets.
Use the official REVIE chatbot for LOA verification (fastest for audit notices).
- Go directly to www.bir.gov.ph.
- Open the REVIE chatbot (usually visible as an icon or chat window).
- Select “LOA Verifier.”
- Enter exactly: your TIN, registered taxpayer name, and the LOA case number from the document.
- If the result shows “LOA FOUND,” the document is recorded in the BIR system and is very likely legitimate.
- If it shows “LOA NOT FOUND,” do not ignore it—proceed to manual verification.
Verify directly with BIR using independent official channels.
- Call the BIR Customer Assistance Division hotline at (02) 8538-3200 or trunkline 8981-7000. Provide the notice reference number, date, and signatory and ask them to confirm issuance.
- Identify your correct RDO (based on your registered address or zip code) through the BIR website or by calling the hotline, then contact that office.
- For manual LOA verification when the chatbot result is negative, email contact_us-LOA@bir.gov.ph with a scanned copy of the notice, your TIN, name, LOA number, and issuing office. Responses are typically provided within three working days.
- Visit your RDO in person with the original or clear copy of the notice and your valid ID. Bring any supporting documents if the notice relates to a specific filing.
Cross-check against your own records. Compare the tax periods, amounts, or discrepancies mentioned with your filed returns (accessible via eFPS, eBIRForms, or the Taxpayer Portal if you are enrolled). Genuine notices are based on BIR’s internal data from your filings or third-party information.
If the notice involves an on-site audit or visit by revenue officers. Ask to see their official IDs and a copy of the LOA or mission order. Legitimate officers will present proper documentation.
Decide next steps only after verification.
- If legitimate: Respond within the stated deadline (submit documents for a PAN, pay or file a protest for a FAN, or cooperate with the audit). Keep copies of everything. Consider engaging a licensed CPA or tax lawyer for complex assessments.
- If fake or unconfirmed: Do not reply to the sender. Report the incident to BIR through contact_us@bir.gov.ph with a copy of the communication. You may also report to the Philippine National Police Cybercrime Unit or National Bureau of Investigation if you suffered any loss.

Common Scam Patterns and Real-World Challenges

Scammers frequently send emails or SMS messages with subject lines like “Notice of Tax Discrepancy,” “Urgent Penalty Assessment,” “Tax Refund Release,” or “Account Verification Required.” They use domains that look similar to bir.gov.ph (for example, bir-notifications.org or gov-ph-bir.com) or spoof the display name. The messages often contain links to fake portals that harvest usernames, passwords, or credit card details, or they demand immediate payment via GCash, bank transfer, or cryptocurrency.

Physical fake letters sometimes arrive with slightly off logos, wrong signatories, or demands for payment to personal accounts—something the BIR never does. Impostors may even appear at residences or offices posing as revenue officers.

Ordinary taxpayers face practical hurdles: busy RDO phone lines during peak seasons, the need to visit in person for complex verifications, and delays when the notice was sent to an old address. Overseas Filipinos or foreigners may find it harder to respond quickly and should authorize a local representative early through a properly executed Special Power of Attorney. Keeping your registered address and email updated in the BIR system (via BIR Form 1905 or ORUS) prevents many delivery issues.

The BIR has publicly warned about phishing and spoofing incidents in various advisories. Real BIR communications never ask you to log into eServices through an emailed link or to pay taxes directly to an individual.

Key Practical Details

No fees for verification through the REVIE chatbot, hotline, or official email.
Timelines: PAN responses are typically due within 15 days of receipt; protests against FAN within 30 days. Audit periods under LOA have defined validity.
Payment channels (if legitimate and final): Only through authorized banks, eFPS, ePay partners, or BIR-accredited channels—never personal accounts or unverified links.
Main offices involved: Your local Revenue District Office (RDO) for most notices; Large Taxpayers Service for qualifying big businesses; BIR National Office in Quezon City for certain central matters.
Helpful portals: ORUS (registration updates), eBIRForms and eFPS (filing and payments), Taxpayer Portal (limited pilot for viewing status).

Frequently Asked Questions

How can I tell if an email is really from the BIR?
Check the full sender address—it must end in @bir.gov.ph or come from a verified RDO account. Never click links. Manually visit www.bir.gov.ph and verify the content or reference number through official channels or the REVIE chatbot.

Does the BIR send important notices only by email?
The BIR increasingly uses registered email addresses for certain communications and acknowledgments, especially when you have enrolled an official email. However, formal assessment notices and LOAs are still primarily served through personal delivery, substituted service, or registered mail/courier in accordance with RR 18-2013. Unsolicited high-stakes demands via email alone are almost always suspicious.

What should I do if a notice demands immediate payment to a personal account or GCash?
This is a clear red flag. The BIR collects taxes only through authorized government channels. Do not pay. Verify first using the steps above and report the communication to BIR.

Is the REVIE LOA Verifier reliable?
Yes. It was officially launched under RMC No. 5-2026 and allows instant checking against BIR records by entering your TIN, name, and LOA case number. A “LOA FOUND” result strongly indicates legitimacy. Use the manual email process (contact_us-LOA@bir.gov.ph) if the result is negative.

How long does verification usually take?
Chatbot results are instant. Hotline or RDO confirmation may take minutes to a few hours during business days. Manual LOA verification via email typically receives a response within three working days.

What happens if I ignore a legitimate BIR notice?
You may lose the opportunity to present your side (for PAN), face collection actions, additional penalties and interest, or, in serious cases of willful non-compliance, referral for criminal action under the NIRC. Always verify first, then respond properly within deadlines.

Can scammers create perfect-looking BIR documents?
They can produce convincing copies, but genuine notices contain specific internal reference numbers, authorized signatories, and are recorded in BIR systems. The REVIE tool and direct RDO confirmation catch most forgeries.

I live abroad or am a foreigner—how do I handle a notice sent to a Philippine address?
Appoint a reliable local representative through a notarized Special Power of Attorney (apostilled if executed outside the Philippines, depending on the country). Keep your registered Philippine address and contact details updated in ORUS. You can also verify remotely via the chatbot, hotline, or email and authorize your representative to handle responses or visits.

Does the BIR ever threaten arrest in the first notice?
Initial notices focus on civil tax assessment and due process. Criminal liability for tax evasion is separate and usually arises only after administrative processes and a formal complaint. Threatening language demanding immediate cash payment is a common scam tactic.

Where do I report a fake BIR notice or email?
Forward the full communication (with headers if email) to contact_us@bir.gov.ph. You may also file a report with the PNP Anti-Cybercrime Group or NBI Cybercrime Division, especially if you have already shared information or money.

Key Takeaways

Always verify independently by going directly to www.bir.gov.ph and using official channels—never rely on links or contact details in the suspicious message itself.
Use the REVIE chatbot for quick LOA checks and follow up with your RDO or the dedicated LOA verification email when needed.
Legitimate BIR notices follow strict due process rules under Section 228 of the NIRC and RR 18-2013 regarding content and service methods.
Red flags include urgency for immediate payment to personal accounts, requests for login credentials, poor document quality, or sender addresses outside official @bir.gov.ph domains.
Keep your BIR registration details (address and email) updated through ORUS or BIR Form 1905 to ensure you receive genuine communications.
Respond to verified notices within the legal deadlines and consider professional tax advice for assessments or audits.
Report suspected scams promptly to help protect other taxpayers.

By taking these verification steps calmly and methodically, you can distinguish real BIR communications from fraud and handle any legitimate tax matter with confidence and full awareness of your rights.