The IRS isn’t calling you — it’s a scam, and here’s what to do if it happens to you