Beat the Scam Scam checks, alerts, and consumer protection guides
Home / Guides / Email Scams / HMRC Tax Rebate Email Scam: Spot a Fake (UK)
Email Scams

HMRC Tax Rebate Email Scam: Spot a Fake (UK)

Scammers are sending fake HMRC emails offering tax rebates to steal your bank details and passwords.

· · · 5 min read

HMRC tax rebate email scamfake HMRC rebate emailHMRC refund email scamis this HMRC email realHMRC phishing emailclaim tax rebate email scamHMRC rebate phishingreport HMRC rebate email
Key rule: verify through an official route you opened yourself, not the link, number, app, or payment details supplied by the suspicious message.
On this page
  1. What a fake HMRC rebate email looks like
  2. Why these HMRC emails fool people
  3. Signs an HMRC email is phishing
  4. How the HMRC rebate scam works
  5. How to check if an HMRC email is genuine
  6. If you clicked or shared details
  7. How to report a fake HMRC email (UK)

What a fake HMRC rebate email looks like

An HMRC tax-rebate scam email pretends to come from HM Revenue & Customs so you click a link and hand over bank, card, or personal details. An example of the style is: You are eligible for a tax rebate of £284.50, with a button such as Claim your refund.

The link often opens a fake GOV.UK-style page. HMRC does send some genuine emails, which is why fake messages can feel convincing. The red flag is an unexpected rebate email that asks you to claim through a link and enter payment or personal details.

Why these HMRC emails fool people

Phishing emails copy HMRC and GOV.UK branding, and the visible sender name can be set to almost anything. A specific refund amount makes the message look official, and the promise of money lowers caution.

The useful distinction is this: HMRC can send genuine emails, but a rebate email asking you to click a link and enter bank details, card details, or full personal information should be treated as phishing. GOV.UK refund guidance points people to official routes such as a P800 tax calculation letter, Personal Tax Account, HMRC app, HMRC online account, contacting HMRC, or cheque where the letter says that applies.

Signs an HMRC email is phishing

  • It offers a tax refund or rebate that you can claim by clicking a link or button.
  • It asks for bank details, card details, your National Insurance number, or other personal information.
  • It uses a generic greeting such as Dear Customer.
  • The sender address is not a genuine HMRC or GOV.UK domain, or the link points to a lookalike site.
  • It pressures you with a deadline before you "lose" the refund.
  • It includes an unexpected attachment, QR code, or shortened link.
  • It looks official but asks you to use a route outside GOV.UK, the HMRC app, or your HMRC online account.

How the HMRC rebate scam works

First, an email claims you are owed a tax rebate. Second, it pushes urgency and asks you to click a claim link. Third, the link opens a fake GOV.UK-style page asking for bank, card, or personal details. Fourth, criminals capture everything you enter. Fifth, they use those details for card fraud, bank fraud, identity misuse, or follow-up impersonation scams.

Checking only through GOV.UK, the HMRC app, your HMRC online account, or a genuine P800 letter breaks the scam chain.

How to check if an HMRC email is genuine

Do not click links or open attachments in an unexpected rebate email.

  • Type gov.uk into your browser and search for Personal Tax Account or HMRC refund guidance.
  • Use the official HMRC app if you already use it.
  • Follow the instructions on a P800 tax calculation letter you received by post.
  • Contact HMRC only through details published on GOV.UK.
  • Hover over links without clicking, but do not rely on that alone; fake emails can be polished.

If you are unsure whether a linked page is a copycat of GOV.UK, our guide on Is This Website a Scam? A Practical Checklist Before You Buy walks through the checks, and our HMRC Tax Refund Text Scam: Spot the Fake (UK) guide covers the same scam by text.

If you clicked or shared details

If you gave bank or card details, contact your bank or card issuer immediately using the number on your card. Tell them it was a scam, ask them to secure the account or card, and ask about disputing any payment. A card payment may be recoverable through chargeback, depending on the circumstances and card scheme rules.

If you sent money by UK bank transfer on or after 7 October 2024, mandatory APP fraud reimbursement rules may apply to Faster Payments and CHAPS transfers. The PSR rules include a 13-month claim window, a maximum claim amount of £85,000, possible exclusions, and a possible excess of up to £100. Report it to your bank as soon as possible.

If you shared personal information such as your National Insurance number, consider Cifas Protective Registration at cifas.org.uk and monitor your credit reports with Experian, Equifax, and TransUnion. Keep the email as evidence.

How to report a fake HMRC email (UK)

Forward suspicious HMRC emails to phishing@hmrc.gov.uk, then delete them. You can also report phishing emails to the National Cyber Security Centre at report@phishing.gov.uk.

If you lost money, shared sensitive information, or were hacked, report it to Report Fraud at reportfraud.police.uk or on 0300 123 2040 if you are in England, Wales, or Northern Ireland. In Scotland, report to Police Scotland on 101. If the same scam reached you by text, forward the text to 60599 for HMRC or to 7726 for your mobile provider.

Frequently asked questions

Does HMRC email people about tax rebates?

HMRC does send genuine emails, so the fact that a message arrived by email is not enough to judge it. Treat an unexpected email that asks you to claim a rebate through a link and enter bank, card, or full personal details as phishing. Check refunds through GOV.UK, the HMRC app, your HMRC online account, or a genuine P800 letter.

How can I tell who really sent an HMRC email?

The visible sender name can be faked. Check the full address and any link destination, but the safest test is to sign in directly through GOV.UK or use official HMRC contact details.

I clicked the link and entered my details - what now?

If you gave bank or card details, call your bank using the number on your card and ask them to secure the account. If you shared personal information, consider Cifas Protective Registration and monitor your credit reports. Then forward the email to phishing@hmrc.gov.uk.

Can I get my money back after an HMRC email scam?

Possibly. If you paid by card, ask your bank about disputing the payment. If you sent an eligible UK bank transfer on or after 7 October 2024, APP reimbursement rules may apply to Faster Payments and CHAPS transfers, subject to limits and exclusions.

How do I report a fake HMRC rebate email?

Forward it to phishing@hmrc.gov.uk and to the NCSC at report@phishing.gov.uk. If you lost money or shared sensitive details, report it to Report Fraud in England, Wales, or Northern Ireland, or to Police Scotland on 101 in Scotland.

Think you’ve spotted a scam? Use the AI scam checker for an instant analysis, or report it to Action Fraud.

Reporting routes in this guide are checked against our verified canon of official UK sources — Action Fraud, the National Cyber Security Centre, and Citizens Advice — by an automated accuracy gate before publication. Fact-checked and updated by , Founder & Editor, on 2026-06-28. Read about how Beat the Scam writes guides.