Is an email saying I owe tax and must pay immediately to avoid prosecution real?
No. Tax authorities send formal written notices by post and do not threaten immediate prosecution in an email with a payment link.
Last reviewed: 1 August 2026
Explanation
Tax authority phishing emails are among the most reported scam types globally. They use official logos, reference numbers, and threatening language about unpaid tax, penalties, or criminal referral to create panic. The link in the email leads to a fake government payment portal that harvests your banking credentials or card details. A variant involves attaching a fake tax demand PDF. Real tax authorities — the IRS, HMRC, ATO, and others — communicate through official correspondence by post, and your account is accessible through the official tax portal only. They do not threaten immediate prosecution in a single email without prior formal notices, and they never direct you to pay via a link in a message.
The panic is the mechanism. A prosecution threat triggers exactly the rushed, unchecked response phishing depends on, and the fake portals are often near-perfect copies of the real thing, down to accessibility footers and help links. Some campaigns run the opposite lure — a refund waiting to be claimed — which harvests the same card and identity details through a friendlier door.
Whatever the framing, the safe response is identical: do not interact with the message at all. Open your tax account by typing the official address yourself or using the government's app, and check for correspondence there. A genuine liability will be visible in your account; a scam will not.
Common red flags
- Email claims you owe tax and must pay via a link immediately
- Threat of immediate arrest, prosecution, or asset seizure
- Link does not lead to the official government tax domain
- Attached PDF demands urgent payment
- No prior correspondence or a tax account entry matching this demand
What to do now
- Do not click any link or pay anything
- Log in to your official tax account on the government website directly
- Forward the email to your tax authority's phishing reporting address
- If you entered card details, contact your bank immediately
Frequently asked questions
How does a real tax debt notice arrive?
Genuine tax demands arrive by post to your registered address. You can also view correspondence in your official online tax account. No first notice of a debt arrives by email with a payment link.
The email quotes a reference number and my exact name — does that mean it's genuine?
No. Names pair with email addresses in countless breach datasets, and reference numbers can be invented freely because you have nothing to check them against. Only correspondence visible inside your official tax account counts.