HMRC Tax Refund Email Scam: Is It Real? How to Tell

Last updated: July 2026

HMRC never emails or texts to tell you about a tax refund — so any email offering an HMRC tax refund is a scam. If you’re genuinely owed money, you’ll see it when you sign in to your own HMRC account or Government Gateway, or you’ll get a letter by post. An email with a link to “claim your refund” and a form asking for bank details is phishing. Don’t click it.

Not sure about the email in front of you? Scan it with ScanTheSender for an instant read.

What this scam looks like

The email claims HMRC has calculated your tax and you’re due a refund — often a specific, believable amount like £268.37 — with a link to claim it. It may copy HMRC and GOV.UK branding, use a reference number, and set a deadline to make you act fast.

The link leads to a fake page that looks like GOV.UK, asking for your name, date of birth, National Insurance number, and bank details “so HMRC can send the refund.” Everything you enter goes to the scammer.

An illustrative example of the wording (a made-up sample, not a real message):

“HMRC Tax Notification: our records show you are owed a refund of £312.40. Claim before 15/04 or it will be forfeited: [link]”

How to tell if an HMRC tax refund email is a scam

• HMRC contacted you about a refund by email or text at all. They don’t. Refunds are shown in your online account or sent by post.
• It asks for bank details, your NI number, or passwords through a link.
• The sender isn’t a genuine HMRC address. Real HMRC emails come from an address ending in @hmrc.gov.uk — but note that sender addresses can be spoofed, so this alone isn’t proof it’s safe.
• There’s a deadline or a threat. Real refunds don’t expire because you didn’t click a link.
• The web address isn’t gov.uk. Lookalike domains (like “hmrc-rebate-uk.com”) are a giveaway.

What to do right now

1. Don’t click the link or enter any details.
2. Check your real account. Sign in at GOV.UK yourself (type the address, don’t use the email’s link) to see if you’re actually owed anything.
3. Report it. Forward the email to HMRC at phishing@hmrc.gov.uk, forward scam texts to 60599, and report to Action Fraud at actionfraud.police.uk or 0300 123 2040.
4. If you entered bank details, call your bank immediately using the number on your card, then report it to Action Fraud.
5. Delete the email.

FAQ

Does HMRC ever email or text about a tax refund? No. HMRC never notifies you of a refund, or asks you to claim one, by email or text. If you’re due money you’ll see it in your HMRC online account or receive a letter. Any refund email or text is a scam.

The email address ended in @hmrc.gov.uk — is it genuine? Not necessarily. Scammers can spoof a sender address so it looks official. Don’t judge by the sender alone. HMRC still won’t email you about a refund, so treat any refund email as a scam regardless of the address.

How do I claim a real HMRC refund? Sign in to your HMRC online account or the HMRC app via GOV.UK — type the address yourself. If you’re owed a refund, you can claim it there securely. You never need to follow a link from an email or text.

I clicked and entered my details. What now? Call your bank straight away using the number on the back of your card. Change your Government Gateway password if you entered it, then report to HMRC (phishing@hmrc.gov.uk) and Action Fraud (0300 123 2040).

Not sure about an HMRC email?

Check if your HMRC email is a scam — paste it into ScanTheSender for a free, instant result before you click anything.

Related reading: watch for the related Council Tax rebate email scam and fake Royal Mail delivery texts.