Fake Tax Refund Scams

A fake tax refund scam impersonates a national tax authority — such as HMRC in the UK, the IRS in the US, or equivalent agencies in other countries — claiming that you are owed a refund. The goal is either to harvest your banking and identity details for subsequent fraud, or to charge a bogus processing fee.

These scams run year-round but peak around tax filing deadlines when people are more likely to expect genuine tax correspondence. Because the communication mimics a real government agency, recipients may feel it demands an immediate, careful response — exactly the state of attention the scammer wants to exploit.

Two distinct variants exist: phishing attacks that direct you to a fake website to enter your details, and fee-for-refund schemes that ask for a small payment to process the refund. In both cases, the refund does not exist.

You receive an email, text, or automated phone call claiming to be from your national tax authority. The message says a tax refund is waiting for you — perhaps a specific amount, perhaps a general eligibility notice. The communication may look very convincing: official logo, correct agency name, professional layout.

In the phishing variant, a link in the message leads to a website that closely mimics the real tax authority's pages. You are asked to enter your name, address, national identification number, bank account details, and sometimes card information to 'receive the refund'. This information is harvested and used to steal from your account or commit identity fraud.

In the fee variant, you are told there is a small processing or administrative charge to release the refund. You pay by card or transfer. The refund never arrives and your payment details may also be used for further fraud.

In phone call variants, an automated message may claim your tax account has been suspended or there is an outstanding matter, and instruct you to call a number where a person will collect details.

Tax refund scams are effective because they impersonate an authority most people have a legitimate relationship with, in a way that feels plausible. A notification about money you are owed is naturally welcome and prompts a positive response.

The tax authority is also associated with rules, deadlines, and consequences — which means a message framing the refund as time-limited or the account as at risk activates both urgency and anxiety at the same time.

Many people also lack a clear mental model of how their tax authority communicates with them, making it harder to recognise when communication is inconsistent with official practice. This gap in familiarity is deliberately exploited.

A person receives a text message claiming to be from a government tax authority, stating that a refund of a plausible amount is waiting. The message includes a link and a 48-hour deadline. The person clicks the link, which opens a page that looks like the official tax authority website. They enter their name, address, and bank account number. Shortly after, unauthorised transactions appear on their account.

HMRC: You are due a tax refund of [amount]. Claim within 24 hours at [fake link]. Failure to claim will result in the refund being cancelled.

IRS NOTICE: A refund of [amount] is pending for your account. Visit [fake link] to verify your banking details and receive payment within 48 hours.

Your tax account requires verification. Please enter your details at [fake link] to confirm your identity and process your outstanding refund of [amount].

HMRC URGENT: Your account has been flagged. Failure to call [phone number] within 24 hours will result in legal action and account suspension.

Tax authority: A processing fee of [amount] is required to release your [amount] refund. Pay at [fake link] to avoid delay.

Real tax refunds from most authorities are processed automatically and paid to the bank account or address you have registered. You are notified through your official online tax account, or by post — not by text message or email with a link.

To check whether a refund is genuine, log in to your tax account directly via the official website you have bookmarked, or navigate there by typing the address yourself. Do not use any link in a message.

Verify the sender's email domain against the official domain listed on the tax authority's real website. For example, in the UK the genuine HMRC domain is gov.uk, not variations like hmrc-refund.co.uk or hmrc.support.

If you receive an unexpected text claiming a refund, check your registered tax account before doing anything else. If the refund is not mentioned in your official account, the message is not genuine.