HMRC tax refund scams: is that text, email or call real?

“You are due a tax refund of £276.40.” “Claim it before it expires.” Fake HMRC messages promise money, then lead to a copy of GOV.UK that asks for your card, bank or sign-in details. HMRC never texts or emails a link to claim a refund. Paste the message below to see where its link really goes before you tap.

Updated 21 October 2026 · 4 min read

Check an HMRC message now

Check one now

Paste the HMRC message

Copy the whole text or email and paste it here, or paste just the link. Peekray picks out the links (up to 8) and shows where each one really goes, with a clear answer such as Safe, Check first or Scam.

To copy a text, press and hold the message, then tap Copy. HMRC is one of the big names Peekray knows, so a site with HMRC in its name that isn’t on gov.uk is flagged.

or type or paste it here

Only the web addresses are sent for checking. Screenshots are read on your device, and our server never reads or keeps the rest of your message.

Got a QR code?

Check it before you open it. The code is read in your browser, and only a web address in it is sent for checking.

What they look like

A refund you didn’t ask for, and a link to claim it

Made-up examples based on real scams. Their links end in .example, so they lead nowhere: no one can own a .example address. The phone number is one kept for fiction.

  • A tax refund by text

    HMRC says it won’t text you about a refund.

  • A tax refund by email

    Scammers can copy HMRC’s email address.

The facts

How HMRC really contacts you

47,000+scam reports to HMRC were about fake tax refunds in the 12 months to 31 July 2025, out of more than 170,000 in all. (HMRC, August 2025)

  • Post

    A letter first

    If you paid too much tax through your job or pension, HMRC sends a tax calculation letter, called a P800, by post. It tells you how to get the money: claim it online with the letter’s reference number, in your HMRC online account or the HMRC app, or wait for a cheque if the letter says one is coming.

  • Text

    No refund texts

    HMRC says it won’t tell you about a tax refund by text. It does send some other texts, listed on GOV.UK, and some link to GOV.UK or HMRC webchat, but none asks for personal or bank details.

  • Email

    Refund emails with no link

    If you haven’t replied to your P800 refund letter, HMRC may email you a reminder. HMRC says that email has no links to websites and doesn’t ask for personal or financial details. Scammers can copy HMRC’s email address, so the sender alone proves nothing.

  • Phone

    No threats on the phone

    HMRC never calls threatening arrest, and never leaves a voicemail threatening legal action. A recorded call saying HMRC is taking you to court and to press 1 is a scam. The number on your screen can be faked.

Spot it

Four signs of a fake HMRC refund

  1. 01

    A refund you claim through a link

    You claim a real refund by signing in to your HMRC online account or the HMRC app yourself, or with the reference number in your P800 letter. A message with a link to claim one is a scam.

  2. 02

    It asks for your card, bank or sign-in details

    HMRC never asks for personal or financial details by text or email. Fake refund pages ask for exactly that, or for your HMRC user ID and password.

  3. 03

    A deadline or a threat

    “Claim before it expires”, “within 24 hours”, a court case or arrest: the rush is there to stop you checking.

  4. 04

    A GOV.UK lookalike on the wrong address

    The fake site copies GOV.UK. The address gives it away: a real HMRC site name ends in .gov.uk. Read the site name from the right, so hmrc.gov.uk.tax‑refund.example is really tax‑refund.example. Paste the message above to see where the link goes.

More on scam emails

Got one?

What to do with an HMRC refund message

  1. 1

    Don’t tap the link, call any number in it or reply.

  2. 2

    To see if you’re really due a refund, sign in to your HMRC online account or the HMRC app yourself: type gov.uk into your browser or open the app, never through the message. If you have a P800 letter, follow that instead.

  3. 3

    Report it (see below), then delete it.

Entered your details? What to do now

Report it

Where to report an HMRC scam (UK)

In the UK

A text
Forward it to 60599 (charged at your network’s normal rate). You can also forward it free to 7726.
An email
Forward it to phishing@hmrc.gov.uk, then delete it.
A phone call
Report it to HMRC on GOV.UK.
The fake website
Report it to the National Cyber Security Centre so it can be taken down.
Lost money
Tell your bank, then report it to Report Fraud at reportfraud.police.uk or on 0300 123 2040 (England, Wales and Northern Ireland). In Scotland, call Police Scotland on 101.

Let Peekray do it

Check the next “tax refund” before you tap.

Add to Chrome, it’s freeCheck on your phone

FAQ

Common questions

Does HMRC text you about a tax refund?

No. HMRC says it won’t tell you about a tax refund by text, and its texts never ask for personal or bank details. A text with a link to claim a refund is a scam.

How do I check if I’m really due a tax refund?

Sign in to your HMRC online account or the HMRC app, by typing gov.uk into your browser or opening the app yourself, not through a link in a message. If HMRC has worked out you paid too much, you’ll also get a P800 letter by post that tells you how to claim.

Is a call from HMRC about a court case or arrest real?

No. HMRC never threatens arrest, and never leaves a voicemail threatening legal action. Hang up without pressing any keys. The number shown on your phone can be faked, so don’t trust it.

Does HMRC contact people on WhatsApp?

Only through the UK Government’s WhatsApp channel, which people choose to follow and which may include the odd tax reminder. HMRC says it won’t contact you on WhatsApp for anything else.

Do scammers target the tax deadline?

Yes. HMRC warns that scammers target Self Assessment customers as they file their tax returns, and the online deadline is 31 January.

I entered my details on a fake HMRC site. What now?

If you entered card or bank details, call your bank now on the number on the back of your card (in the UK you can also dial 159). If you entered your HMRC sign-in, change that password, and any other account where you use the same one. Then email HMRC’s security team at security.custcon@hmrc.gov.uk to say what you entered, but not the details themselves. Peekray’s guide to what to do after a scam link takes you through the rest.

Does Peekray read my messages?

No. When you paste a message, Peekray picks out the links on your device and sends only those web addresses to its server to check. The rest of the message isn’t sent.

Sources

Where this advice comes from

Guides

More help