How do I spot a fake tax refund email?
Governments do not issue tax refunds by asking you to click an email link and enter your bank details — real refunds are credited automatically or by cheque to your registered details.
Last reviewed: 10 June 2026
Explanation
Tax refund phishing is a high-volume fraud category that peaks around the end of the financial year in both the UK (April) and the US (April filing deadline). The email claims you are owed a refund and directs you to a convincing clone of the HMRC or IRS website where you enter your bank account details to 'receive' the money. The fraudster then uses those details to drain your account or redirect future legitimate refunds.
Some variants ask for card details rather than account details, framing the transaction as a 'refund' going to your card. A refund going to a card you enter on a website is never how government tax agencies operate — they credit the bank account linked to your tax record, not a card number you supply on a form.
Real refund processes: HMRC refunds go to the bank account registered with HMRC or by cheque — you can update your bank details only through your Personal Tax Account at gov.uk. The IRS issues refunds to the account on your filed return or by cheque — not to card numbers provided via email link.
If you believe you are owed a refund, log in to your Personal Tax Account (gov.uk) or IRS Online Account (irs.gov) to check your actual position.
Common red flags
- Email directs you to click a link and enter bank account or card details to receive a refund
- Sender email is not from @hmrc.gov.uk or @irs.gov
- Link goes to a domain other than gov.uk or irs.gov
- Refund amount is a round number with no reference to your specific tax calculation
- Urgency: 'refund expires in 48 hours if not claimed'
What to do now
- Do not click any link or provide bank details in response to the email
- Log in to your tax account at gov.uk or irs.gov to check your real position
- Forward the email to [email protected] (UK) or [email protected] (US)
- Report to Action Fraud (UK) or the FTC (US)
- If you submitted your details, change your banking passwords and notify your bank
Frequently asked questions
How does HMRC notify me of a real refund?
HMRC sends a letter to your registered address informing you of a refund. It may then be paid automatically to the account on file. It does not email you a link to claim it.
What if I already entered my bank details?
Contact your bank immediately and ask them to monitor for suspicious activity or to change your account details. Report to HMRC and Action Fraud.
Can a genuine tax refund go to a different bank account than usual?
Only if you have logged in to your Personal Tax Account and updated your bank details yourself. A refund cannot be redirected by filling in a form from an email link.