HMRC Tax Refund Email — How to Tell It's a Scam
You received an email from what appears to be HMRC saying you're owed a tax refund. It asks you to click a link and enter your bank details. HMRC will never email you asking for bank details or personal information. This is a phishing scam.
Think this email is a scam?
Forward it to us and get a free risk assessment in under 60 seconds.
How This Scam Works
Critical Risk — UK Government Impersonation
HMRC will never email you asking for bank details, credit card information, or personal data. Any email claiming you're owed a tax refund with a link to enter your details is a phishing scam.
You receive an email that appears to be from HM Revenue and Customs (HMRC) telling you that you are entitled to a tax refund. The email includes a link to a website where you are asked to enter your bank details, National Insurance number, or credit card information to receive the refund.
The fake HMRC website looks convincing, often replicating the GOV.UK design. Once you enter your information, scammers use it to drain your bank account or commit identity fraud. Some versions ask you to download a form, which may contain malware.
HMRC reports that it receives reports of millions of phishing emails, calls, and texts each year. In the 12 months to September 2023, HMRC responded to nearly 208,000 referrals of suspicious communications from the public. Tax refund scams are the single most common HMRC impersonation type.
Red Flags
- Claims HMRC owes you a tax refund or rebate
- Asks for bank details, card numbers, or your National Insurance number
- Sender address is not from @hmrc.gov.uk
- Link leads to a website that is not gov.uk/hmrc
- Creates urgency with a deadline to claim your refund
HMRC processes tax refunds through your Personal Tax Account or by cheque sent to your registered address. They never send emails with links to enter banking details.
What You Should Do
What To Do
- Do not click any links or download any attachments
- Do not enter your bank details or National Insurance number
- Log in to your Personal Tax Account at gov.uk/personal-tax-account to check for refunds
- Report the email to HMRC through their official phishing page at gov.uk
- Delete the email
How to Verify Legitimately
Sign in to your Personal Tax Account at gov.uk/personal-tax-account using your Government Gateway credentials. Any genuine tax refund will be shown there. You can also call HMRC's Income Tax helpline at 0300 200 3300 to check your tax position. HMRC will send refunds to your bank account on file or by cheque — never through a third-party website.
Sources
- HMRC — Examples of phishing emails, suspicious phone calls and texts (GOV.UK)
- GOV.UK — Warning to Self Assessment customers as scam referrals exceed 200,000