HMRC Scam Text Message: Stop Before You Tap That Link

It is a normal Tuesday afternoon, and your mobile phone buzzes in your pocket. You pull it out to see a new text message. The sender appears to be "HMRC" or "GOV UK." The message reads: "HMRC Alert: You have an outstanding tax refund of £482.50 from the last financial year. Please click the secure link below to claim your funds before they expire."

Alternatively, the message might be much darker: "HMRC: You have an unpaid tax bill of £950. A warrant for your arrest will be issued if payment is not made within 2 hours. Click here to pay immediately."

Whether the message brings a rush of excitement about free money or a wave of sheer terror about going to jail, your first instinct is to click the link to resolve the situation. Stop right there. Do not tap your screen. You are the target of an hmrc scam text message. This is a sophisticated, highly orchestrated psychological trap, and clicking that link could cost you your entire life savings.

What is a Smishing Attack?

If you are wondering what is smishing, it is simply a cybersecurity term for "SMS phishing." Instead of sending you a fake email, criminals send you a fake text message. Smishing is incredibly effective because our mobile phones feel much more personal than our email inboxes. We are conditioned to reply to texts from family and friends instantly, which means we often act on text messages without applying the same critical thinking we use when checking our emails.

Scammers know that the topic of taxes brings out strong emotions. Nobody fully understands the complex tax system, and everyone is slightly anxious about making a mistake. By impersonating Her Majesty's Revenue and Customs (HMRC), criminals borrow the ultimate authority figure to bully or trick you into compliance.

The 3 Main Types of HMRC Text Scams

While the exact wording changes every few months, criminals generally cycle through three main scripts. Recognising these text message scam examples is the key to protecting yourself.

1. The "Tax Rebate" Miracle

This is the most common lure. The text claims you overpaid your taxes and are owed a substantial refund. To claim it, you just need to click a link and "confirm your bank details" so they know where to send the money. In reality, you are giving the scammers the keys to your bank account.

2. The "Arrest Warrant" Threat

This scam relies purely on fear. The text claims you have committed tax fraud and the police are on their way to your home unless you click the link to pay a penalty fine immediately. Often, the link will ask you to pay the fine using bizarre methods, like buying digital gift cards or cryptocurrency.

3. The "National Insurance Compromised" Alert

The message warns that your National Insurance number has been used in illegal activities (like money laundering or drug trafficking) and has been "suspended." You must click a link to verify your identity to clear your name. The link takes you to a fake site that steals your passport details, driving licence, and mother's maiden name for identity theft.

How the Fake GOV.UK Trap Works

If you do click the link in the text message, your phone's browser will open a website that looks flawlessly like the real GOV.UK portal. It will have the iconic crown logo, the green buttons, and the exact same fonts used by the UK government.

However, if you look at the web address bar at the very top of your screen, the truth is revealed. Instead of saying `www.gov.uk/hmrc`, it might say `www.gov-uk-refund-portal-online.com` or `www.hmrc-secure-update.net`. The entire website is a fake storefront. Every piece of information you type into those boxes—your name, your address, your bank sort code, your passwords—is recorded and sent directly to a criminal network.

5 Rules to Spot an HMRC Scam Instantly

To keep yourself and your money safe, simply memorize these five undeniable rules of how the real HMRC operates.

HMRC Never Texts About Refunds: The government has stated categorically: HMRC will never send notifications of a tax rebate or ask you to disclose personal or payment information by text message. If a text mentions a refund, it is 100% a scam.
HMRC Does Not Send Links: True government texts will almost never contain a clickable web link. They will simply tell you to log into your online account independently.
Check the Sender Number: Criminals use cheap software to make the caller ID say "HMRC." However, if you click the contact details, you might see it is actually coming from a standard mobile number starting with `07`, or an international number. The government does not text you from personal mobile phones.
They Do Not Threaten Arrest via Text: If you truly owed thousands of pounds in unpaid tax, the government would send multiple official letters in the post, not a panicked text message giving you two hours to pay.
The Spelling is Off: Scammers often make tiny mistakes. They might write "taxes" instead of the standard UK "tax," or their grammar might feel slightly broken.

What to Do If You Receive This Text

Do not reply to the text, even to tell them to stop. Replying simply confirms to the scammers that your phone number is active, and they will sell your number to other criminals. Instead, forward the scam text message to 7726. This is a free reporting service provided by phone operators that helps them block the numbers scammers are using. After you forward it, delete the text.

What to Do If You Clicked the Link

If you were caught off guard, clicked the link, and typed your bank details into the fake website, you must act with extreme urgency.

Call Your Bank: Do not wait. Call the official phone number on the back of your bank card immediately. Tell them you have been the victim of an HMRC phishing scam. They will freeze your card and protect your money.
Change Your Passwords: If you used your usual password on the fake site, you need to change it on all your real accounts immediately (like your email and your actual GOV.UK account).
Report to Action Fraud: Contact Action Fraud online or call 0300 123 2040 to officially report the identity theft to the police.

The Golden Rule of Government Texts

The government communicates important tax information via the post or through your secure online portal, not via random text messages. Never click a link in a text claiming to be from HMRC. If you are worried about your tax status, log onto `www.gov.uk` directly from your own web browser.