Is this HMRC text real?
"You are owed a tax refund" — HMRC Scam Texts and Emails
The short answer: if a text or email contains a link to claim a refund, it is a scam. HMRC never does that.
📞 If you gave details, call 159The one rule that settles it
HMRC will never send you a link to claim a tax refund. Not by text, not by email, not by WhatsApp. Refunds appear in your HMRC online account, or arrive by post.
So if you are holding a message with a link and a rebate figure, you already have your answer. You do not need to inspect it further.
What the scam messages look like
- A rebate figure — often £200–£400, just enough to feel worth claiming but not suspiciously large.
- A deadline: "claim within 24 hours or your refund is cancelled".
- A link to a page that copies the gov.uk design almost exactly, with the crown logo.
- A request for your bank details "to pay the refund into".
- Sometimes a request to confirm your National Insurance number or a photo of your passport or driving licence.
- Sent from an ordinary mobile number, or a shortcode that is one digit off HMRC's published ones.
If you already entered details — act in this order
- Gave bank details or card number? Call 159 and ask your bank to freeze the account. A frozen account costs you nothing; an emptied one costs months.
- Gave your National Insurance number? Report it to HMRC on 0300 200 3300 and consider Cifas Protective Registration, which flags your identity for extra checks.
- Gave your name, date of birth and address? Expect follow-up calls in the coming weeks from people claiming to be HMRC, your bank or the police. They will sound convincing because they already have your details. This is recovery fraud.
- Forward the evidence. Texts to 7726, emails to [email protected]. Do not delete the message before you have forwarded it.
- Report it. Action Fraud on 0300 123 2040 or reportfraud.police.uk.
How to check a refund safely
Type gov.uk/personal-tax-account into your browser yourself. Never arrive there by clicking a link in a message, even if it looks right — scammers buy domains that differ by one character.
Or call HMRC directly on 0300 200 3300, using the number from gov.uk rather than from the message.