Blog · 15 October 2026

GAO Tax Fraud Estimate: Federal Losses of $116–$304 Billion a Year—What US CPA Firms Should Tell Clients About Fraud vs the Tax Gap

By Keshav Bansal, CA

The U.S. Government Accountability Office’s first comprehensive estimate of federal tax fraud losses puts the annual range at $116 billion to $304 billion (GAO-26-107810, published September 25, 2026). Applied to tax year 2022, that is roughly 2% to 6% of estimated tax owed and about 17% to 43% of the gross tax gap. GAO’s WatchBlog (October 7, 2026) and the Journal of Accountancy (Martha Waggoner, September 29, 2026) summarize the same figures. For US CPA firms, the report is less about a single headline number and more about how fraud differs from the broader tax gap—and what that means for preparer intake, identity-theft defenses, and client conversations when the IRS first contacts someone by mail.

What GAO measured (and what it did not)

GAO-26-107810 estimates annual federal tax revenue lost to fraud using data and information from 2018 through 2024. The estimate combines IRS case data on fraud and potential fraud, potential fraud inside the tax gap, and tax evasion in the “shadow economy” (legal activity purposefully hidden from the government). GAO describes the range as its best estimate given uncertainty and data limits—not a precise count, a forecast, or a net figure after recoveries. The true loss could fall outside the published band.

That framing matters when clients confuse “tax gap” with “fraud.” The tax gap is all unpaid tax, including honest mistakes and underreporting without intent. Fraud, as GAO uses the term, is willful misrepresentation to obtain something of value—intentional underpayment, nonfiling with intent, or criminal refund theft. The Journal of Accountancy notes the IRS has estimated that taxpayers ultimately will fail to pay about $606 billion of the taxes owed for tax year 2022 (the net tax gap). Fraud is a large slice of that story, not the whole story.

Three fraud buckets firms already see in practice

GAO’s WatchBlog groups many schemes into three categories that map cleanly onto firm risk conversations:

• Tax evasion. Taxpayers intentionally misreport income or expenses, claim credits they do not qualify for (WatchBlog cites EITC as an example), or fail to file with intent to evade.
• Return-preparer fraud. A paid preparer files false returns—inflated expenses, fake deductions, or excessive credits—with or without the taxpayer’s knowledge. Clients remain liable for the tax and interest even when a preparer padded the return; see our guide to ghost preparers and preparer responsibility.
• Identity-theft refund fraud. Criminals use stolen personal information to file returns and steal refunds, often through large enterprises rather than a lone actor.

Civil practice sits next to those buckets. The 75% civil fraud penalty under §6663 and the unlimited assessment period under §6501(c)(1) still require clear and convincing proof of intent—a bad deduction is not automatically fraud, as Mitchell illustrates in our civil fraud penalty and statute-of-limitations note.

What the IRS is already doing—and where GAO says gaps remain

GAO credits a wide set of IRS controls. Through the Return Review Program, the IRS estimates it prevented about $88 billion in invalid and potentially fraudulent refund payments from fiscal years 2018 through 2024. WatchBlog adds that in fiscal year 2024 the IRS issued 1,400 penalties totaling $115 million and initiated more than 2,600 criminal investigations. JOA reports auditors completed more than 4.8 million audits from 2018 through 2024 and recommended an average of $24.9 billion annually in additional assessments over that span.

Even so, GAO concludes the IRS lacks an agency-wide antifraud strategy and has not designated an antifraud entity to coordinate fraud-risk management across the organization. GAO made two open recommendations: develop and document an antifraud strategy (agency-wide or at operating level with designated oversight), and designate an antifraud entity. JOA reports the IRS partially agreed, argued that some noncompliance does not meet the legal threshold for fraud, disputed a “fragmented” characterization of governance, and said Chief Tax Compliance Officer Jarod Koopman already coordinates division fraud initiatives. GAO continues to believe both recommendations should be implemented.

What US CPA firms should tell clients

• Separate fraud from the tax gap. Unpaid tax can be error, dispute, or intent. Do not let clients treat every balance-due letter as an accusation of fraud—or assume a large national estimate means their honest return is “in the dragnet.”
• You stay liable if a preparer pads the return. Tax and interest still attach to the taxpayer. Screen intake for refund-percentage fees, unsigned paid returns, and refunds routed to someone other than the client.
• Use an IP PIN and IRS Online Account against ID-theft filing. An Identity Protection PIN helps stop someone else from e-filing in the client’s name; Online Account helps clients see transcripts and notices early.
• Expect first contact by mail. Most IRS outreach is still letter-based (CP notices, AUR/CP2000 matching). Teach clients not to share SSN or bank data with callers who claim to be the IRS. Our Data Book / CP2000 triage guide covers how to sort matching letters from real exams.
• Document intent defenses early. Contemporaneous records, advice reliance, and consistent answers matter if the IRS later asserts civil fraud or seeks to keep the assessment statute open.

A short firm checklist

1. Add ID-theft and ghost-preparer screening questions to new-client intake.
2. Encourage high-risk or prior-victim clients to obtain an IP PIN and to monitor IRS Online Account.
3. When a client brings a padded prior-year return, quantify tax and interest exposure before debating penalties.
4. Triage every IRS envelope: matching letter vs correspondence exam vs field audit vs collection.
5. Keep workpapers that show the facts the client provided—useful if intent is later contested.

Where this fits for Tax Brew readers

GAO’s $116–$304 billion estimate is a resource-allocation signal for Congress and the IRS, not a new Code section. For firms, it reinforces familiar controls: clean preparer practices, identity-theft hygiene, and calm notice triage. If your practice needs capacity for return review and bookkeeping support, outsourced tax prep and bookkeeping support for US CPA firms can help. Email info@taxbrewglobal.com.

Sources: U.S. GAO, GAO-26-107810, “Tax Fraud: The Federal Government Loses an Estimated $116 Billion to $304 Billion Annually” (published Sept. 25, 2026); GAO WatchBlog, “Tax Fraud Costs Up to $304 Billion Each Year” (Oct. 7, 2026); Journal of Accountancy, Martha Waggoner, “GAO tax fraud estimate puts annual losses at up to $304 billion” (Sept. 29, 2026); IRS Identity Protection PIN / Online Account pages (general taxpayer protections). General information, not tax or legal advice. Sources as of 15 October 2026.