🎣 Tax Scams

Fake Tax Email Scam: How to Spot It and What to Do Immediately

📅 30 April 2026 ⏱️ 6 min read 🎯 Very common during tax season
Every year during tax season, millions of people receive fake emails from tax authorities. A refund waiting for you, a bailiff threat, a request for your ID... These scams are becoming increasingly convincing. Here's how to spot them instantly and what to do if you've already clicked.

📧 What does a fake tax email look like?

⚠️ Real scam example
From:hmrc-refund@gov-hmrc-online.info
Subject:Tax Refund — Action Required
Following a review of your tax records, you are entitled to a refund of £347.00. To receive this refund, please click the link below and enter your bank details within 48 hours.
⚠️ Threatening scam example
From:enforcement@hmrc-gov-uk.xyz
Subject:Unpaid Tax — Legal Action Within 48 Hours
You have an outstanding tax debt. Failure to settle within 48 hours will result in a warrant being issued and enforcement officers visiting your property. Settle immediately by clicking here.

🔍 5 signs it's a scam

  • 🚨The email address isn't the official domain — HMRC only sends from @hmrc.gov.uk. Any other domain (.info, .xyz, gov-hmrc.com) is a scam.
  • 🚨They ask for your bank details — HMRC never asks for your card number by email to process a refund.
  • 🚨They threaten bailiffs or arrest — A real tax investigation always starts with an official letter, never an email threat.
  • 🚨They ask for your ID by email — Tax authorities never request a copy of your passport or driving licence by email.
  • 🚨Artificial urgency of 24-48 hours — Classic technique to stop you thinking clearly. Real tax deadlines are always reasonable.
✅ What tax authorities actually do
  • HMRC only emails from @hmrc.gov.uk — the IRS from @irs.gov
  • They never ask for bank details by email
  • They never ask for your password
  • They never threaten you by SMS or email
  • Refunds go directly to your registered bank account
  • Real investigations always start with an official letter

✅ What to do if you received this type of email

  • 1
    Don't click any link Even to "check" — the link may install malware or redirect you to a fake site.
  • 2
    Check your official tax account directly Type your tax authority's website address manually in your browser. If a refund or alert is real, it will appear there.
  • 3
    Report the email Forward suspicious emails to phishing@hmrc.gov.uk (UK) or phishing@irs.gov (US)
  • 4
    If you already clicked — act fast Change your passwords immediately. If you entered bank details, call your bank right away.
  • 5
    Report to Action Fraud (UK) Visit actionfraud.police.uk or call 0300 123 2040 to report the scam.
⚠️ New 2026 scam — crypto and tax texts
  • Fraudulent texts are circulating since April 2026 threatening taxpayers with a 40% penalty for "undeclared crypto transactions"
  • The fake site URL ends in -gov-uk.com instead of .gov.uk
  • Tax authorities never contact you by text to demand urgent declarations
  • If in doubt → go directly to your tax authority's official website

❓ Questions fréquentes

No. HMRC and the IRS never send emails asking you to click a link to claim a refund. Refunds go directly to your registered bank account. If you're expecting a refund, log in directly at gov.uk/personal-tax-account or irs.gov.
Check the sender's email address: it must end in @hmrc.gov.uk (UK) or @irs.gov (US). Any other domain is a scam. When in doubt, go directly to the official website by typing the address yourself — never click the link in the email.
Act fast: 1) Change your passwords immediately, especially your email password. 2) If you entered bank details, call your bank right away. 3) Report it to Action Fraud at actionfraud.police.uk or call 0300 123 2040. 4) Report the email to phishing@hmrc.gov.uk.
No, never. A real tax investigation always starts with an official letter sent by post. HMRC never threatens by email or text. If you receive this type of message, it's 100% a scam.
Forward suspicious HMRC emails to phishing@hmrc.gov.uk. For IRS scams, forward to phishing@irs.gov. You can also report to Action Fraud (UK) at actionfraud.police.uk or the FTC (US) at reportfraud.ftc.gov.

Received a suspicious tax email?

Describe it to CyberGuard — it'll tell you in seconds whether it's a scam.

🤖 Analyse with CyberGuard →
📖 Complete guide — Protect Your Family Online
30 pages · Tax scams, phishing, passwords · Instant download
Buy $6.90 →
📖 Related articles