Tax Refund Text Scam: How to Spot and Avoid It

Introduction

The tax refund text scam is one of the most active and financially damaging consumer frauds operating during tax season — and in 2026 it has expanded well beyond its traditional seasonal window to operate throughout the year. The Federal Trade Commission published a specific consumer alert about the tax refund text scam in January 2026, warning consumers that scammers are sending fake text messages and emails claiming they have a tax refund waiting — and that clicking the link could lead to stolen personal information and financial loss. If you have received an unexpected text or email about a tax refund, this comprehensive guide from Scammers Expose will give you everything you need to know.

The tax refund text scam is a particularly effective fraud because it combines two powerful motivations: the genuine expectation of a tax refund — which millions of people are legitimately waiting for during filing season — and the authority of government tax agencies, which carries significant weight with most consumers. When someone who is genuinely expecting a refund receives a message claiming their refund is ready to be claimed, the combination of relevance and apparent official authority creates strong motivation to click the link without pausing to verify its legitimacy.

The tax refund text scam operates year-round but peaks dramatically during tax filing season — from January through April in the United States, and around self-assessment deadlines in the United Kingdom. During these periods, the scam is carefully timed to coincide with genuine refund communications from tax authorities, making the fraudulent versions even more difficult to distinguish from the real thing. The IRS has consistently warned consumers about this fraud, noting that the agency does not initiate contact with taxpayers by text message or email about refunds.

This guide from Scammers Expose provides a thorough breakdown of the tax refund text scam: how it reaches victims, how it unfolds step by step, every major variant currently in operation, the specific warning signs every taxpayer must know, real stories from affected individuals, what tax authorities and consumer protection agencies say, and the concrete steps you must take if you have already received or responded to a suspicious tax refund message. Understanding the tax refund text scam fully is the most effective protection available.

What Is the Tax Refund Text Scam?

The tax refund text scam is a smishing and phishing fraud in which criminals send fake text messages or emails impersonating tax authorities — the Internal Revenue Service in the United States, HMRC in the United Kingdom, the ATO in Australia, or other national tax agencies — claiming that the recipient has a tax refund available to claim. The message contains a link to a fraudulent website designed to harvest the victim’s personal information, financial details, or login credentials — which are then used for identity theft, financial fraud, or further targeted phishing.

The tax refund text scam is not a new fraud — tax impersonation has been a persistent fraud category for decades. What is new in 2026 is the scale, sophistication, and year-round nature of the scam. Modern tax refund text scam operations use professional-grade phishing infrastructure, AI-generated personalised messages, sender ID spoofing that makes messages appear to come from official tax agency shortcodes, and highly convincing fake websites that are visually identical to genuine tax portal pages.

The tax refund text scam causes harm in two distinct ways. The first is the direct financial harm of card details entered on fraudulent sites being used for unauthorised purchases. The second — and often more serious — is the identity theft enabled by the personal information collected during the fake refund claim process, including Social Security or National Insurance numbers, date of birth, address, and banking details that enable much broader financial fraud beyond the immediate transaction.

How the Tax Refund Text Scam Works Step by Step

Step 1: The Fake Tax Refund Message Arrives

The tax refund text scam begins with an unsolicited text message or email appearing to come from a tax authority. The message typically states that the recipient is entitled to a tax refund of a specific amount — often a realistic figure such as $312, $847, or £294 — and that the refund is available to claim immediately through a provided link. The message creates urgency by stating that the refund will expire if not claimed within a specified period — typically 24 to 72 hours.

The tax refund text scam message may include the recipient’s name — sourced from data breaches — to create an impression of personalisation consistent with genuine government communication. The sender ID may show as “HMRC”, “IRS”, or another tax agency name — achieved through sender ID spoofing — making the message appear in the same thread as any genuine tax agency messages the recipient has previously received.

Step 2: The Urgency and Expiry Warning

The tax refund text scam creates urgency through a refund expiry warning. The recipient is told their refund will be cancelled, returned to the treasury, or forfeited unless claimed within the stated window. For someone who has been waiting for a legitimate refund, the threat of losing money they are owed is particularly motivating. This urgency is deliberately calibrated to prevent the recipient from pausing to verify the message through independent channels before clicking the link.

Step 3: The Fake Tax Portal

Clicking the link in the tax refund text scam message leads to a website that closely mimics the genuine tax authority’s online portal. The fake site uses the official logo, colour scheme, and layout of the IRS, HMRC, or ATO website. The URL is designed to look plausible — it may use the agency’s name combined with words like “refund”, “claim”, “gov”, or “portal” in a non-.gov domain. On mobile devices, where the full URL may not be visible and the screen is smaller, the fake site is particularly difficult to distinguish from the genuine portal.

Step 4: Harvesting Personal and Financial Information

The fake portal in the tax refund text scam presents a multi-step refund claim form. The form asks for progressively more sensitive information — starting with name and address, then moving to Social Security or National Insurance number, date of birth, and employment details, before requesting bank account or payment card information to “process the refund deposit.” Each piece of information entered is captured immediately by the criminals. The combination of identity information and financial details enables comprehensive identity fraud well beyond the immediate transaction.

Step 5: The Confirmation and False Reassurance

After submitting their information, the victim of the tax refund text scam typically receives a professional-looking confirmation page stating that their refund application has been received and will be processed within three to five business days. This confirmation reduces the likelihood of immediate suspicion — the victim expects to wait for the refund and will not become alarmed until a week or more has passed without any payment. By this time, the information collected has already been exploited.

Step 6: The Consequences Emerge

The impact of the tax refund text scam typically becomes apparent through multiple channels — unauthorised charges on payment cards, fraudulent accounts opened in the victim’s name, a genuine tax communication from the actual tax authority that reveals no such refund exists, or a credit monitoring alert flagging unusual activity. By this point the personal and financial information entered on the fake portal has been in criminal hands for days or weeks and has likely already been exploited in multiple ways beyond the initial scam.

Tax Refund Text Scam: The Most Common Variants

The IRS Refund Text Scam

The most prevalent US variant of the tax refund text scam impersonates the Internal Revenue Service. Messages claim the recipient has an unclaimed tax refund — sometimes referencing a specific tax year — and direct them to a fake IRS portal to claim it. The IRS has been explicit for many years that it does not initiate contact with taxpayers by text message or email about refunds — all refund notifications are sent by post to the address on file. Any text or email claiming to be from the IRS about a refund is a tax refund text scam.

The HMRC Refund Text Scam

The most prevalent UK variant of the tax refund text scam impersonates HMRC — His Majesty’s Revenue and Customs. These messages are particularly active around the self-assessment deadline in January and the end of the tax year in April. They claim the recipient is owed a specific refund amount and provide a link to claim it. HMRC has confirmed that it does not send text messages containing links to claim refunds — all genuine HMRC refund notifications direct taxpayers to sign in to their Government Gateway account directly, not through a link in a text.

The State Tax Refund Scam

This variant of the tax refund text scam impersonates state-level tax authorities rather than the federal IRS — claiming the recipient is owed a state income tax refund. This variant may be less immediately recognisable to recipients who are not aware that state tax agencies, like the IRS, do not initiate contact by text message about refunds. The state tax refund variant of the tax refund text scam is particularly active in states with high income taxes where refunds are common.

The COVID Relief Refund Scam

This variant of the tax refund text scam claims the recipient is entitled to a COVID-related tax relief payment or unclaimed pandemic assistance refund. While genuine COVID relief payments were distributed in previous years, the window for claiming them has largely closed. Messages claiming new COVID-related tax refunds are available in 2026 are almost certainly running the tax refund text scam. The pandemic context gives the fraud a plausible narrative that many recipients find difficult to dismiss immediately.

The Email Phishing Variant

While the text message variant is most prevalent, the tax refund text scam also operates extensively through email phishing. Fraudulent emails use official-looking tax agency branding, genuine agency contact details in the footer, and professional HTML formatting that closely mimics genuine government email templates. The email variant typically reaches a broader audience than text-based attacks and may be more convincing on desktop devices where the full email header can be more easily examined — but where the fraudulent sender domain is also more easily visible to an informed recipient.

Tax Refund Text Scam Warning Signs

• You received an unsolicited text or email about a tax refund: The most fundamental tax refund text scam warning sign. The IRS does not initiate contact by text or email about refunds. HMRC does not send texts with links to claim refunds. Any unsolicited message about a tax refund is almost certainly a tax refund text scam
• The message contains a link to claim the refund: Genuine tax refund notifications do not contain clickable links to claim portals. Genuine tax agencies direct taxpayers to log in to their account directly by typing the URL into their browser — not by clicking a link in a message. Any tax refund notification containing a clickable link is a definitive tax refund text scam
• The refund will expire if not claimed immediately: Genuine tax refunds do not expire within 24 to 72 hours of a text message notification. Expiry threats in a tax refund notification are a standard tax refund text scam urgency tactic designed to prevent independent verification
• The link does not go to a .gov domain: In the US, the IRS website is irs.gov — a .gov domain. In the UK, HMRC’s portal is part of gov.uk. Any link in a supposed tax refund notification that leads to any other domain — regardless of how official it looks — is a tax refund text scam phishing site
• You are asked for card details to receive the refund: Tax authorities deposit refunds to bank accounts already registered with them or mail cheques to your address. They do not ask you to enter payment card details to receive a refund. Any refund claim process asking for card details is a tax refund text scam
• The message uses generic greetings rather than your name: “Dear taxpayer” or “Dear customer” in a supposed tax notification — rather than your actual name as it appears on your tax records — is a tax refund text scam indicator, as genuine tax communications are always addressed to the specific individual
• The sender ID shows the tax agency name but the contact is unexpected: Sender ID spoofing allows tax refund text scam operators to display “IRS” or “HMRC” as the sender name. A matching sender ID is not proof of legitimacy — always verify through the official agency website directly
• The refund amount is a specific, realistic figure: Providing a specific realistic refund amount — $847, £312 — makes the tax refund text scam feel more credible than a vague claim. The specificity is a fabrication designed to suppress the recipient’s scepticism

Real Stories: How the Tax Refund Text Scam Affects Real People

Story 1: The Accountant Who Fell for the HMRC Text

A forty-six-year-old accountant — someone with professional knowledge of tax systems — received a text message in early February claiming to be from HMRC and stating she was owed a £847.50 self-assessment tax refund. The amount corresponded closely to a refund she was genuinely expecting from her self-assessment return, which she had submitted the previous month. The coincidence of amount and timing made the message feel entirely legitimate.

She clicked the link — which led to a convincing HMRC-branded portal — and completed the claim form, entering her National Insurance number, date of birth, bank sort code, and account number. Three days later she received a genuine letter from HMRC about her actual refund — which was indeed being processed but had not yet been issued. The tax refund text scam had harvested her banking details in the interval. When she checked her account, she found that a £340 fraudulent direct debit had been set up using her account details. Her bank reversed the payment, but she had to close and replace her account — a significant administrative disruption.

Story 2: The Student and the IRS Refund Email

A twenty-three-year-old university student received an email claiming to be from the IRS stating that a $612 tax refund was available for his most recent return. The email used official IRS branding and directed him to a website where he could verify his identity and receive the refund. As a first-time filer who was genuinely unsure of what to expect from the IRS refund process, he completed the form on the fake site — providing his Social Security number, date of birth, and a prepaid debit card number to receive the refund.

No refund arrived. Two months later, he discovered that his Social Security number had been used to file a fraudulent tax return in a different state. The tax refund text scam had not only captured his card details but had created a tax identity theft situation that required filing an IRS Identity Theft Affidavit and dealing with the IRS Identity Protection Unit — a process that took over eight months to fully resolve.

Story 3: The Retiree and the COVID Relief Text

A sixty-five-year-old retiree received a text message claiming that unclaimed COVID-19 tax relief funds were being distributed to eligible recipients, and that she had been identified as eligible for a $1,400 payment that would expire if not claimed within 48 hours. Having received a genuine COVID stimulus payment in a previous year, the context felt familiar and credible.

She clicked the link and completed the claim form — providing her Social Security number, date of birth, address, and bank account details. When she discussed it with her daughter two days later, her daughter immediately identified the tax refund text scam and helped her contact her bank and the IRS. A fraudulent direct debit attempt of $890 had already been made on her account — which her bank had flagged and blocked. Her Social Security number, however, had been compromised — requiring fraud alerts, a credit freeze, and ongoing monitoring.

What Tax Authorities Say About the Tax Refund Text Scam

Tax authorities in every major jurisdiction have published specific and repeated warnings about the tax refund text scam — all delivering the same unequivocal message: genuine tax agencies do not initiate contact by text message or email about refunds.

The Internal Revenue Service has been explicit for many years that it does not send unsolicited texts or emails about refunds. The IRS initiates all refund-related contact by post to the taxpayer’s address on file. The IRS specifically warns consumers that any text or email claiming to be from the IRS about a refund is a phishing attempt and should be reported to phishing@irs.gov. The IRS’s guidance on phishing and tax refund text scam reporting is available at irs.gov/identity-theft-central.

The Federal Trade Commission has specifically addressed the tax refund text scam in its January 2026 consumer alert, noting that before people respond to a text or email about a tax refund — especially one that asks them to click a link — they should know that this is a scam designed to get personal information and steal their tax refund. The FTC advises consumers to go directly to irs.gov or their state tax agency’s website to check on their refund status rather than clicking any link. Report at reportfraud.ftc.gov.

HMRC in the United Kingdom has published extensive guidance on the tax refund text scam variants targeting UK taxpayers, confirming that HMRC never sends text messages with links to claim refunds and never asks for personal or financial information by text. UK consumers can report HMRC phishing texts and emails directly to HMRC at phishing@hmrc.gov.uk and suspicious texts can be forwarded to 7726. General fraud reports should go to Action Fraud at actionfraud.police.uk.

The National Cyber Security Centre in the UK maintains an active suspicious email reporting service and works to take down fraudulent tax refund websites. Report suspicious emails to report@phishing.gov.uk and suspicious websites at ncsc.gov.uk.

How to Protect Yourself from the Tax Refund Text Scam

Never Click Links in Tax Refund Texts or Emails

The single most effective protection against the tax refund text scam is never clicking a link in any text message or email claiming to be from a tax authority about a refund. This rule defeats every variant of the tax refund text scam completely. If you want to check the status of a genuine tax refund, go directly to the official tax authority website by typing the URL into your browser — in the US use irs.gov, in the UK use gov.uk/check-income-tax-current-year — and log in to your account there.

Know How Tax Authorities Actually Communicate

Protecting yourself from the tax refund text scam is significantly easier when you understand how genuine tax authorities actually communicate with taxpayers. The IRS communicates primarily by post — all official IRS correspondence about refunds, notices, and account status arrives by mail to your registered address. HMRC communicates by post and through the Government Gateway online account — not by text message with links. When you know how the genuine agency communicates, identifying the tax refund text scam becomes straightforward: any channel that differs from the genuine agency’s standard practice is immediately suspicious.

Report Suspicious Messages Immediately

Forward suspicious tax refund text scam messages to the relevant authority before deleting them. In the US, forward IRS phishing texts to 202-552-1226 and emails to phishing@irs.gov. In the UK, forward HMRC phishing texts to 7726 and emails to phishing@hmrc.gov.uk. Also report the suspicious website to the NCSC at report.ncsc.gov.uk and to Google Safe Browsing. Your report contributes to the identification and takedown of tax refund text scam infrastructure.

Check Your Refund Status Through Official Channels Only

If you are genuinely expecting a tax refund and want to check its status, use the official tools provided by the genuine tax authority — never a link from a text or email. In the US, use the IRS “Where’s My Refund?” tool at irs.gov. In the UK, check through your Government Gateway account at gov.uk. These official tools give you accurate refund status information without any risk of the tax refund text scam or any other phishing exposure.

Place a Tax Identity Protection PIN With the IRS

US taxpayers can proactively protect themselves from tax identity fraud — including the downstream consequences of the tax refund text scam — by enrolling in the IRS Identity Protection PIN programme. The IP PIN is a six-digit number that must be included on your tax return to verify your identity — making it significantly harder for criminals to file a fraudulent return in your name even if they have obtained your Social Security number. Enrol at irs.gov/identity-theft-central.

What to Do If You Have Already Been Targeted

Contact Your Bank Immediately If Financial Details Were Entered

If you entered payment card details or bank account information on a tax refund text scam website, contact your bank or card provider immediately. Report that your details have been compromised through a fraudulent government website and request card cancellation and replacement. Ask your bank to review recent transactions and monitor your account for unauthorised activity. If you entered bank account details for direct deposit, ask your bank whether a direct debit instruction has been set up without your authorisation and cancel it immediately.

Report to the IRS and FTC

If you submitted personal information — particularly your Social Security number — on a tax refund text scam site, report the identity theft to the IRS at irs.gov/identity-theft-central and file an Identity Theft Affidavit if appropriate. Report the phishing attempt to phishing@irs.gov. File a complaint with the FTC at reportfraud.ftc.gov and use the personalised recovery plan at identitytheft.gov.

UK Victims: Report to HMRC and Action Fraud

UK victims should report the tax refund text scam to HMRC at phishing@hmrc.gov.uk, to Action Fraud at actionfraud.police.uk, and to the NCSC at report.ncsc.gov.uk. If your National Insurance number was compromised, contact HMRC’s dedicated helpline and consider placing a fraud alert on your credit file with the major credit reference agencies.

Place a Fraud Alert and Credit Freeze

If personal identity information was submitted through a tax refund text scam portal, place a fraud alert and credit freeze with all major credit bureaus immediately. In the US contact Equifax, Experian, and TransUnion. Monitor your credit report for any new accounts, enquiries, or changes you did not authorise. Consider enrolling in a credit monitoring service if one was offered as part of any data breach notification you have previously received.

File Your Tax Return Early Next Season

One of the most practical protective measures following a tax refund text scam that involved submission of your Social Security or National Insurance number is to file your tax return as early as possible in the next filing season. Filing early reduces the window available to criminals to use your SSN to file a fraudulent return before yours — which is one of the most common downstream consequences of the identity information harvested through the tax refund text scam.

Conclusion

The tax refund text scam is a precisely engineered fraud that exploits the combination of financial expectation and government authority to produce one of the highest compliance rates of any phishing fraud type. The millions of people who are genuinely waiting for tax refunds during filing season provide an enormous, pre-qualified audience for the scam — and the timing of messages to coincide with genuine refund periods makes the fraudulent version feel entirely plausible at exactly the moment when recipients are most receptive.

The defence against the tax refund text scam is absolute and simple: never click a link in a text or email about a tax refund. Tax authorities do not send refund notifications by text. They do not provide links to claim portals. They do not ask for card details to deposit refunds. If you need to check on a genuine refund, go directly to the official government website — and the tax refund text scam cannot reach you.

If this article helped you understand the tax refund text scam, please share it with friends, family, and colleagues — particularly during tax season when the fraud is at its most active. For more scam alerts and consumer protection advice, visit Scammers Expose.

Related Articles

If you found this article helpful, you may also want to read these related scam awareness guides:

• Imposter Scam Warning Signs: How to Spot and Avoid It
• Traffic Violation Text Scam: How to Spot and Avoid It
• Unemployment Identity Theft Scam: How to Spot and Avoid It
• Government Grant Scam: How to Spot and Avoid It
• Phishing Scam Warning: Signs, Examples, and How to Stay Safe