Fake HMRC / IRS Tax Rebate Email Scam Examples
An email designed to look like an official notice from HMRC, the IRS, or another tax authority claims you are due a refund and provides a link to a government portal to claim it, which is actually a convincing fake page built to collect your bank account number, card details, and personal identification information. The appeal of unexpected free money lowers people's guard around entering sensitive details. Real tax authorities do not notify refunds by email link and rarely ask for bank details this way. Go directly to the real tax authority's website or your existing online account to check any refund.
Last reviewed: 1 June 2026
Sanitized example messages
Illustrative, sanitized examples. Personal details are replaced with placeholders such as [phone number] and [fake link].
HMRC: Following a review of your tax return, you are entitled to a tax rebate of [amount]. Claim here: [fake link]
IRS Tax Refund Notice: A refund of [amount] is awaiting processing. Verify your details to receive payment: [fake link]
Gov.uk Tax Refund: Your application reference [number] shows an unclaimed refund. Complete your claim before [date]: [fake link]
HMRC Automated Notification: You have an outstanding tax credit of [amount]. Provide your bank details to process: [fake link]
What the scammer wants
To steal bank account details, card numbers, and personal identity information via a convincing fake government portal that mimics the real tax authority website.
Red flags in the message
- Unsolicited tax rebate notification by email — real agencies write by post or secure online account
- Link to a domain that is not the verified official tax authority domain
- Request for bank or card details to 'receive' a refund
- Deadline pressure to claim before a set date
- No personalisation with your full name and national reference number
A safe response
Do not click. Log in to your official government tax account directly by typing the address. Any genuine refunds are visible inside your account and are processed without you entering bank details via an email link.
What not to send
- Bank account or card details
- National Insurance or Social Security number
- Personal identity documents
What to do if you already replied
- Contact your bank immediately if you entered payment details
- Report the email to the tax authority's fraud reporting service
- Monitor your credit file for identity fraud
Evidence to preserve
- Screenshot the full message or call details
- Note the sender number, email, or profile
- Save any links (without clicking) and payment details
- Record dates and times
Frequently asked questions
The page looked official with the right logo and colors — how do I know it's fake?
Scammers frequently copy official branding, colors, and page layouts, so visual polish is not proof of authenticity. Check the web address carefully for anything unusual, and always navigate to the tax authority's site by typing the official address yourself rather than clicking an email link.
I entered my bank account details on the page — what should I do now?
Contact your bank immediately to report the details as compromised, and ask them to monitor your account for unauthorized activity or set up additional protections. Also report the scam to the real tax authority, which often has a dedicated phishing report address.
How can I check if I'm actually owed a tax refund?
Log in to your official tax account directly through the authority's real website, typed yourself, or use paperwork you already have from previous filings. Genuine refunds are typically processed automatically or shown in your existing account, not announced by an unsolicited email link.
Do tax authorities ever email about refunds?
Most tax authorities primarily communicate about refunds through official mail or your secure online account, not unsolicited emails asking you to click a link and enter bank details. Treat any email refund notice with a link as suspicious until verified independently.