Blog

Fraudsters are pretending to be HMRC in texts, emails, and phone calls, offering fake refunds or threatening fines to trick people into revealing personal or banking details.

If you file your own return, run a business, or receive benefits, it’s vital you know what to look out for.

What HMRC scams look like

Common scam formats include:

• Emails promising tax rebates with links to fake refund claim forms.
• Text messages claiming your tax account has been suspended, asking you to verify details.
• Phone calls threatening arrest for unpaid tax or National Insurance contributions.
• Fake GOV.UK pages, often reached via sponsored ads or misleading links.
• Social media messages pretending to offer ‘tax resolution’ support.

These messages often look authentic, with official branding, real-sounding reference numbers, and UK phone prefixes, but they are designed to make you act quickly before you can think clearly.

Why people are falling for them

Taxpayers expect to hear from HMRC during Self-Assessment season or when tax codes change, so scam messages can seem plausible. Scammers often create a false sense of urgency, such as threatening legal action or saying you only have ‘24 hours to respond.’

You might be more vulnerable if:

• You’re self-employed or a freelancer.
• You’ve recently submitted a return or claim.
• You’ve received communication from HMRC in the past and expect more.
• You’re unfamiliar with how HMRC usually contacts taxpayers.

Three steps to protect yourself

1. Stop and evaluate

Always pause before clicking on a link or providing any information. HMRC never pressures people to act on the spot or share sensitive details via email or SMS.
2. Know what HMRC won’t do

Genuine HMRC communications will never:

• Ask for your bank details or passwords in an email or text.
• Request payment through gift cards, crypto, or prepaid vouchers.
• Send links to tax refund claim forms outside GOV.UK.
• Contact you via WhatsApp, Facebook, or Instagram.

Always log in to your tax account by going directly to www.gov.uk rather than clicking on any message link.
3. Report and get support

If you think a message is suspicious:

• Forward emails to phishing@hmrc.gov.uk
• Report the scam to Action Fraud at www.actionfraud.police.uk or by calling 0300 123 2040, Monday to Friday 8am – 8pm
• Make a report here: www.gov.uk/report-tax-fraud

If you’ve shared banking details or clicked a malicious link, let your bank know immediately.

What to do if you’ve shared information

If you think you’ve responded to a scam:

1. Log in to your HMRC account and change your password.
2. Notify your bank or credit card provider immediately.
3. Inform HMRC and us so we can monitor any account misuse.

Acting quickly limits damage and helps HMRC shut down fraudulent domains.

Protect your team

If you run a business:

• Educate your finance and HR staff on common scam tactics.
• Restrict who has access to your government gateway login.
• Avoid clicking on any links in unexpected messages.

Scammers increasingly target payroll teams with fake tax code notices or refund claims, hoping to gain internal access to employee records or business bank accounts.

Final thought

Tax scams are becoming more sophisticated by the day. But with a critical eye and a little caution, you can spot and report them before harm is done.

When in doubt, don’t respond, verify. It’s better to delay for clarity than act under pressure and regret it.