Protecting UK Families & Businesses Knowledge is power — we make sure you have it
Menu ☰
CyberAware UK CyberAwareUK Stay Aware · Stay Secure
🧰 All Scam Tools 🚨 Get Help 📢 Report a Scam
✕ Exit 𝕏 💼 🎧
Menu
✕
Home 📰 Press & Media 🔍 Search
▶Check a Scam
▶Been Scammed? Start Here
▶Family & Child Safety
▶Remove Your Data
▶Latest UK Alerts
▶Scams & Money
▶Technical / DarkWatch
▶Learn & Guides
▶About Us
© 2026 CyberAware UK
Is this HMRC text real?

"You are owed a tax refund" — HMRC Scam Texts and Emails

The short answer: if a text or email contains a link to claim a refund, it is a scam. HMRC never does that.

📞 If you gave details, call 159

The one rule that settles it

HMRC will never send you a link to claim a tax refund. Not by text, not by email, not by WhatsApp. Refunds appear in your HMRC online account, or arrive by post.

So if you are holding a message with a link and a rebate figure, you already have your answer. You do not need to inspect it further.

What the scam messages look like

  • A rebate figure — often £200–£400, just enough to feel worth claiming but not suspiciously large.
  • A deadline: "claim within 24 hours or your refund is cancelled".
  • A link to a page that copies the gov.uk design almost exactly, with the crown logo.
  • A request for your bank details "to pay the refund into".
  • Sometimes a request to confirm your National Insurance number or a photo of your passport or driving licence.
  • Sent from an ordinary mobile number, or a shortcode that is one digit off HMRC's published ones.

If you already entered details — act in this order

  1. Gave bank details or card number? Call 159 and ask your bank to freeze the account. A frozen account costs you nothing; an emptied one costs months.
  2. Gave your National Insurance number? Report it to HMRC on 0300 200 3300 and consider Cifas Protective Registration, which flags your identity for extra checks.
  3. Gave your name, date of birth and address? Expect follow-up calls in the coming weeks from people claiming to be HMRC, your bank or the police. They will sound convincing because they already have your details. This is recovery fraud.
  4. Forward the evidence. Texts to 7726, emails to [email protected]. Do not delete the message before you have forwarded it.
  5. Report it. Action Fraud on 0300 123 2040 or reportfraud.police.uk.

How to check a refund safely

Type gov.uk/personal-tax-account into your browser yourself. Never arrive there by clicking a link in a message, even if it looks right — scammers buy domains that differ by one character.

Or call HMRC directly on 0300 200 3300, using the number from gov.uk rather than from the message.

Related threats

Government fraud — DWP, DVLA, council tax →
Parcel delivery scam texts →
I've been scammed — the full emergency checklist →
Check a suspicious link free →

Last reviewed: 4 September 2026 · Sources: Action Fraud · NCSC · Cifas — how we verify
🚨