HMRC Self Assessment Scam UK: Fake Refund & Tax Bill Texts
HMRC does send genuine texts and emails about Self Assessment — it just never asks you to click a link to 'confirm' your bank details.
What the Self Assessment scam looks like
This scam is a text, email, or letter timed around the Self Assessment deadlines — 31 October for paper returns, 31 January for online returns and payment — claiming you're due a tax refund or have an overdue payment that needs "confirming" urgently. An example of the style: HMRC: You are eligible for a tax refund of £287.50. Click here to submit your claim. The link opens a page built to capture your bank details, card number, or Government Gateway login.
Warning signs to look for
- You're told you have a refund waiting and asked to click a link to "claim" or "confirm your bank details" — HMRC does not issue refunds this way.
- The message creates urgency around the Self Assessment deadline, pressuring you to act immediately.
- You're asked to enter your Government Gateway login, full card details, or bank account details on a page reached via a link in the message.
- The sender address or number isn't one you recognise from previous genuine HMRC contact, or the link doesn't lead to a gov.uk address.
- You haven't yet filed a Self Assessment return, so a message about your specific tax position doesn't add up.
- The message threatens immediate legal action, arrest, or bailiffs over an unpaid amount — genuine HMRC contact about arrears follows a formal, written process, not a same-day threat by text.
How this scam works step by step
Messages are sent in bulk around the Self Assessment deadlines, when large numbers of people are genuinely thinking about tax refunds or payments, making the timing believable regardless of whether you've actually filed a return. The message links to a page built to look like a genuine HMRC or Government Gateway login. Entering your details there hands them straight to the scammer, who can use them to access your real HMRC account, apply for a refund in your name and redirect it elsewhere, or use your bank details directly for fraud.
How to check if a Self Assessment message is genuine
Don't click the link. Log into your Government Gateway account directly by typing gov.uk into your browser yourself, and check there for any genuine correspondence or refund status. HMRC has confirmed it does send genuine text and email reminders about Self Assessment, so a message existing at all isn't proof of a scam — but it will never ask you to click a link to "confirm" your bank or card details in exchange for a refund.
If you've received a letter and want to check it's genuine, contact HMRC using the number on gov.uk, not any number printed on the letter itself.
What to do if you've already clicked or entered details
If you entered your Government Gateway login, change your password immediately by going to gov.uk directly, and check your account for any changes you didn't make, including bank details linked for repayments. If you entered card or bank details, contact your bank straight away and explain what's happened. Report the message to HMRC — see below — so it can be investigated.
How to report a Self Assessment scam in the UK
Forward a suspicious email to HMRC's phishing address, phishing@hmrc.gov.uk, and forward a suspicious text to 60599. Report a fake social media account impersonating HMRC to branddefence@hmrc.gov.uk, and use HMRC's online service to report a suspicious HMRC phone call. If you've lost money, report it to Report Fraud at reportfraud.police.uk or 0300 123 2040 if you're in England, Wales, or Northern Ireland — in Scotland, report to Police Scotland on 101.
Frequently asked questions
Does HMRC ever genuinely text or email about Self Assessment?
Yes — HMRC has confirmed it does send genuine text and email reminders about Self Assessment. The key difference is that a genuine message never asks you to click a link to "confirm" your bank or card details to receive a refund.
I haven't filed a tax return — why did I get a message about my refund?
These messages are sent in bulk around the Self Assessment deadlines specifically because so many people are thinking about tax at that time, regardless of whether they've actually filed. Not having filed a return makes a specific refund claim even less credible, not more.
I clicked the link and entered my Government Gateway details — what should I do?
Go to gov.uk directly and change your password immediately, then check your account for anything you didn't authorise, including any bank details linked for repayments. If you also entered card or bank details, contact your bank straight away.
How do I report a fake HMRC Self Assessment message?
Forward a suspicious email to phishing@hmrc.gov.uk, forward a suspicious text to 60599, and use HMRC's online service to report a suspicious HMRC phone call. If you've lost money, report to Report Fraud at reportfraud.police.uk or 0300 123 2040 (Police Scotland on 101 in Scotland).
Sources checked
- GOV.UK — Check if a text message from HMRC is genuine
- GOV.UK — Identify HMRC-related scam messages
- LITRG — Changes to HMRC text messages