Scam guide

HMRC tax refund text scam: how to spot a fake rebate message

Published 1 October 2026 · SafeHop guides

In short: a text, email or WhatsApp message says HMRC owes you a tax refund and gives you a link to "claim" it. The link leads to a fake GOV.UK login page that steals your Government Gateway details and bank information. The real HMRC never tells you about a tax rebate, or asks you to claim one, by text, email or WhatsApp. If you're due a refund, HMRC contacts you by post or through your official online tax account.

Why this scam matters

Fake tax-refund messages are one of the most common scams in the UK. In the 12 months to 31 July 2025, HMRC received more than 170,000 scam referrals from the public, over 47,000 of which involved bogus tax-refund claims, according to HM Revenue & Customs. They work because the amount offered sounds small and believable, and the fake page looks just like the real GOV.UK.

What the message looks like

The wording varies, but it always offers money and a link to claim it quickly. Typical versions:

"HMRC: You are due a tax refund of £242.68. Claim here before it expires: [link]"
"Your tax rebate for the 2025/26 year is ready. Verify your details to receive payment: [link]"
"We tried to issue your refund but your bank details are missing. Update them to receive £584: [link]"

The amounts are often oddly specific (commonly a few hundred pounds) to look like a real calculation.

6 signs of a fake HMRC refund message

It tells you about a refund by text, email or WhatsApp. HMRC never does this. That alone makes it a scam.
A link to "claim" or "verify". The real HMRC refund process is in your online tax account, not through a link in a message.
The link isn't really gov.uk. Watch for extra words and odd endings like hmrc-refund-claim.co or gov-uk-tax.top. Shortened links hide the real address.
Pressure: "before it expires", "within 24 hours", "final reminder".
It asks for your Government Gateway login, bank details or National Insurance number through the link. HMRC never asks for these this way.
It came from a random mobile number or odd email address, not an official channel.

What to do

Don't click the link. If you want to check whether you're owed anything, sign in to your tax account yourself at gov.uk (type the address, don't follow the message).
Not sure about the message? Paste it into the SafeHop message checker. It reads the wording and where the link really goes, without opening it, and your message never leaves your browser.
Report it, then delete it: forward scam texts to 7726, suspicious emails to [email protected], and HMRC scam texts to 60599.

If you already entered your details

If you gave bank or card details, call your bank straight away using the number on your card and tell them.
If you entered your Government Gateway login, change that password now, and any other account where you reuse it.
Report it to HMRC ([email protected]) and to Action Fraud on 0300 123 2040 or at actionfraud.police.uk (in Scotland, call 101).
Watch your statements and your tax account for anything you don't recognise.

Got a message like this? Paste it into SafeHop's free checker. It reads the wording and every link and tells you if it looks like a scam, without opening anything. Your message never leaves your browser.

Check a message Get the free extension

More guides

This guide is general safety information, not legal or financial advice. Organisations and authorities are named only to show who scammers pretend to be; SafeHop is not affiliated with any of them.