Both the HM Revenue and Customs (HMRC) and the Internal Revenue Service (IRS) have issued public warnings regarding the increasing rates of scams targeting taxpayers and the high financial loss to governmental bodies and individuals around the globe these scams impact (HMRC 2020a; IRS 2021). However, despite this large impact on the economy, there is limited research on the working practices of the individuals behind these acts of fraud (Tzani-Pepelasi et al. in Journal of Forensic and Investigative Accounting, 2020). The present study utilised videos where Internet trolls engage with HMRC/IRS scammers, who attempted to delay scammers and protect victims, to investigate the stages involved with this scam using crime script analysis. The findings of this study potentially highlight that such fraudulent operations utilise scam scripts with amendable steps, according to the scammers’ experience and the victims’ gullibility. The limitations and implications of the study are discussed.