Fake HMRC Child Benefit Reverification Scam
Scammers send texts and emails impersonating HMRC, claiming recipients must re-verify their Child Benefit claim online to prevent suspension. HMRC reviews Child Benefit eligibility through formal written correspondence — not through unsolicited links requiring credential entry.
Part of: Benefit Reverification Phishing Scams
Last reviewed: 7 June 2026
Child Benefit is a payment administered by HMRC that many families depend on to help with child-rearing costs. Because families are understandably worried about any disruption to this payment, HMRC-branded messages threatening suspension of Child Benefit are a highly effective social engineering tool.
Scammers send messages claiming that an 'annual review' or 'eligibility check' is required for the recipient's Child Benefit award, and that failure to complete an online form within a short deadline will result in payments being stopped. The link leads to a fake Government Gateway login page harvesting credentials.
HMRC conducts genuine Child Benefit reviews, but these are communicated through letters sent by post and through secure messages in the recipient's Personal Tax Account. HMRC does not send unsolicited texts or emails asking Child Benefit claimants to log in via an embedded link.
How this scam works on the HMRC brand
Texts read: 'HMRC: Your Child Benefit claim requires annual re-verification. Complete by [date] or payments will pause: [link].' The link opens a fake HMRC Government Gateway login page.
Once credentials are captured, the criminal logs in to the real Personal Tax Account, changes the bank account details for Child Benefit payments, and redirects future payments to a different account.
Email variants carry HMRC logos and may reference the specific Child Benefit reference number associated with the recipient — data potentially obtained from a previous phishing campaign or data breach. Knowing a reference number does not make a message legitimate.
Common red flags
- Unsolicited text or email about Child Benefit re-verification with a link
- Link goes to a domain other than gov.uk
- No corresponding secure message in your HMRC Personal Tax Account
- Message asks for Government Gateway username and password via a link
- Email address is not from @hmrc.gov.uk
- Urgency: 'payments suspended in 48 hours if not completed'
- Message references a specific Child Benefit amount (which scammers may guess or obtain through breaches)
How to protect yourself
- Log in to your HMRC Personal Tax Account directly at gov.uk/personal-tax-account — never via a link
- Call HMRC Child Benefit on 0300 200 3100 to verify any communication
- Forward suspicious emails to [email protected]
- Forward suspicious texts to 60599
- If credentials were entered on a fake page, change your Government Gateway password immediately and call HMRC
How to report it
- Forward phishing emails to [email protected]
- Forward suspicious texts to 60599
- Report to the NCSC at report.ncsc.gov.uk
- Report to Action Fraud at actionfraud.police.uk or 0300 123 2040
- If bank details on your HMRC account were changed fraudulently, call HMRC Child Benefit immediately
Frequently asked questions
How does HMRC contact Child Benefit claimants about reviews?
HMRC sends written correspondence by post for Child Benefit reviews. It may also send notifications to your Personal Tax Account inbox. It does not send unsolicited texts with re-verification links.
Can a scammer redirect my Child Benefit payments?
If a criminal accesses your Government Gateway account, they can change the bank account linked to your Child Benefit payments. This is why protecting your credentials is critical.
What if I already clicked the link and entered my login?
Change your Government Gateway password immediately, then call HMRC Child Benefit on 0300 200 3100 to alert them. Check your Personal Tax Account for any unauthorised changes to your payment details.