An email says your tax refund is waiting, all you have to do is click a link. A text warns that action is needed on your return. Both feel urgent, look official, and are probably a tax refund scam built to steal your money or personal information.
How the scam works
The scam has two versions, and both rely on urgency:
- The refund hook. The message says you are owed a refund (usually a specific, believable amount) and that you must click a link or provide bank details to receive it.
- The problem hook. The message says there is a problem with your return — missing information, a verification step, or a deadline — and you must act now to avoid penalties.
Either way, the link leads to a fake login page that looks like the real tax authority's site. Enter your credentials or bank details there, and the scammers have them.
What real tax authorities do and never do
The fastest way to spot the fake is to know how real tax authorities behave:
- They never initiate refunds by email or text. Refunds go through your filed return and your chosen method (direct deposit or cheque). There is no "click here to claim your refund".
- They never ask for payment by gift card, wire transfer, or crypto. Any message requesting those is a scam.
- They never demand immediate action with threats of arrest or account suspension over email.
- They communicate through your secure account portal, not through emailed links.
These rules hold for the IRS (US), HMRC (UK), and most EU tax agencies. If a message violates any of them, it is a scam.
The red flags
- A sender address that is not the official domain (e.g.,
[email protected]instead ofirs.gov). - Urgency and threats: "Your refund will be cancelled", "Legal action will be taken".
- A link that leads somewhere other than the official site — hover over it to see the real destination.
- A request for bank details, Social Security number, or a "processing fee" to release a refund.
- Poor grammar or a generic greeting like "Dear taxpayer".
What to do if you clicked
If you clicked a link or entered details on a fake tax page:
- Do not enter anything else. Close the page.
- If you entered your password, change it immediately on the real tax authority site — and anywhere else you used the same password.
- If you entered bank details, contact your bank and ask them to monitor for fraud.
- Report the message. In the US, forward phishing emails to [email protected] and file a complaint at ReportFraud.ftc.gov. In the UK, forward suspicious texts to 7726 and emails to [email protected]. EU residents can use their national tax authority's phishing reporting channel.
- If you lost money, report it to the FBI IC3 (US) or your national fraud reporting service.
How to check a real refund status
If you are genuinely expecting a refund, check it the official way: through your tax authority's secure portal (the IRS's "Where's My Refund", HMRC's app or online account). Never use a link from an email or text to check your refund status.
Quick answers
Do tax authorities email about refunds? No. Real tax authorities communicate through secure portals and never initiate refunds by email or text.
Can a fake tax email look official? Yes. Scammers copy logos and wording. The sender address, the link destination, and the demands (gift cards, immediate action) are what expose them.
What should I do if I entered my details on a fake site? Change your password immediately, contact your bank if you entered bank details, and report the message to your tax authority's phishing channel.
How do I check my real refund status? Through your tax authority's official portal, never through an emailed link.
Sources and further reading
Written by Hassan Arshad, founder of UsefulOrbit. Last updated August 31, 2026.