Can a tax authority email me a link to click in order to claim a tax refund?
No. Tax authorities do not email links to click for refund collection. Refund notification emails containing links are phishing attempts regardless of how official they appear.
Last reviewed: 10 June 2026
Explanation
Tax refunds, where they are owed, are processed automatically by the tax authority and deposited to your registered bank account or sent by cheque. There is no action you need to take via a link in an email to claim a refund. If your bank details need updating, you do this through the secure login on the official government website — not by clicking an emailed link.
Tax refund phishing emails are perennial and spike around the end of the tax year when people are expecting refunds. They mimic the visual design of official tax agency communications and create a sense of entitlement — 'you are owed money' is a compelling hook. The link leads to a credential-harvesting page or a form collecting bank details that are then used for fraud.
Signs that an email is not from a real tax authority: the sender's email domain is not the official government domain, the email contains grammatical errors, the link URL is different from the official website address, or the email was unexpected.
If you believe you are owed a tax refund, log directly into your official tax account at the government website — type the address yourself or use a bookmarked link — and check your account there.
Common red flags
- Email claims you are owed a tax refund and asks you to click a link
- Sender's email address is not an official government domain
- Link URL does not match the official tax authority website
- Email asks for bank details, card details, or login credentials
- Refund amount specified is unusually precise but you did not file for one
- Email contains spelling or grammatical errors
What to do now
- Do not click any links in the email
- Forward the phishing email to the tax authority's phishing report address
- Log into your official tax account directly to check for any genuine refund
- Report the phishing email to your national cybersecurity authority
- If you clicked and entered details, change your tax account password immediately
- Contact your bank if you shared any financial details
Frequently asked questions
How does the IRS or HMRC actually notify me of a refund?
In the US, the IRS sends a check or direct deposit and notifies you via your IRS online account or mailed notice. In the UK, HMRC notifies through your Personal Tax Account or a P800 tax calculation letter. Neither uses email links to collect your bank details.
The email has my correct name and partial address — is it still a scam?
Personalised phishing emails are common. Your name and partial address are obtainable from many sources. The safest rule is: never follow email links to claim money. Always log into the official portal directly.