Is a VAT or sales tax refund email from the tax authority real?
Unsolicited tax refund emails are almost always phishing. Real tax agencies communicate through official post or verified online portals, not by asking you to click a link to claim a refund.
Last reviewed: 1 June 2026
Explanation
Tax refund phishing emails are sent in waves, often timed around filing seasons. They claim you are owed a refund and ask you to click a link and enter your bank account or card details to receive the money. The page looks like an official tax authority website but is a fake designed to steal your credentials or payment details. In reality, tax authorities process refunds through the bank account you registered during your tax return submission. They do not email you a clickable link to collect money. If you believe you are owed a refund, log in to your tax authority's official website directly — never through a link in an email.
Common red flags
- Email promises a refund and asks you to click a link to claim it
- Link goes to a site with a domain slightly different from the official tax authority
- Refund amount is very specific to seem credible but you filed no return
- Email asks for full card details to 'transfer' the refund
What to do now
- Do not click any link in the email
- Log in to your tax authority's official portal directly to check your status
- Forward the phishing email to your national tax authority's fraud reporting address
- If you entered card details, call your bank immediately
Frequently asked questions
Can the tax authority ever email me about a refund?
Some authorities send notification emails telling you a refund has been processed, but they direct you to log in to your existing account — they never ask for bank or card details by email.