“HMRC: give us your details to get a tax refund”. TBT checks: texts asking for personal details are a scam, including those about cryptoassets

What we checked

This week sees the deadline for paper Self Assessment returns (31 October), and the deadline for online returns falls on 31 January. This is a period when fraudsters pose as the tax office. We checked a common type of message: a text “from HMRC” that promises a tax refund or asks you to “complete information” for a cryptoasset declaration and directs you to a link where you have to enter your details.

How we checked

On 28 October 2026 we compared the content of such messages with HMRC’s official rules on GOV.UK, with the government page on reporting scams and with HMRC’s warnings. We do not assess specific individuals or companies – we only examine how the scam works.

What is confirmed and what is not

Confirmed: according to GOV.UK, HMRC will not text you about a tax refund and will not ask for personal or payment details by text. On refunds or payment details, HMRC only emails from an address ending in hmrc.gov.uk. HMRC also does not offer refunds through social media.

Confirmed: in October HMRC warned on its X account about a rising number of fake texts about a cryptoasset declaration. The tax office stressed that it may send a text pointing to guidance on GOV.UK, but never asks for personal or financial information in it.

Confirmed: the scale of the problem is large. In December 2025 HMRC said that more than 135,500 HMRC-related scams had been reported in 10 months, including 29,000 about fake tax refunds, as well as more than 4,800 Self Assessment scams.

Unconfirmed: we do not have current 2026 figures on the number of such texts among Poles in the UK. We also do not know how many people have lost money this year.

How to protect yourself

• Do not click links in texts about tax refunds. Log in to your HMRC account yourself via GOV.UK.
• Forward a suspicious text “from HMRC” to 60599 (charged at your normal network rate), and emails to [email protected]. Then delete it.
• You can forward other suspicious texts free of charge to 7726 (a report to your mobile provider).
• If you have given your card details or lost money, call your bank immediately and report it to Report Fraud (England and Wales, tel. 0300 123 2040). In Scotland, contact the police (Police Scotland).

Sources: GOV.UK – Report suspicious HMRC emails, texts, social media accounts and phone calls (updated 24 November 2025); GOV.UK – Avoid and report internet scams and phishing; HMRC Press Office – Self Assessment scams (17 December 2025); HMRC warning on X about texts concerning cryptoassets (October 2026). Checked on 28 October 2026.