Overview

• Fraudsters are posing as HMRC to offer bogus rebates or demand instant payments to steal personal and banking details.
• Reports to HMRC totaled over 170,000 in the 12 months to 31 July 2025, including more than 47,000 fake refund attempts, a 12% year-on-year fall.
• HMRC says it will not request passwords or financial data by text or email, notify refunds by phone, text or email, or leave voicemails threatening arrest or legal action.
• Customers are urged to file returns early as scam activity often intensifies closer to the 31 January 2026 Self Assessment deadline.
• Legitimate refunds are claimed only via secure HMRC online accounts or the official app, and suspicious texts should be sent to 60599, scam calls reported on GOV.UK, and phishing emails forwarded to phishing@hmrc.gov.uk.