HMRC tax scam refund — fake rebates, fake demands, and how to claim.

Fraudsters impersonate HMRC in two main ways: a “tax rebate” lure that harvests your card details, and a “tax debt” threat designed to make you transfer money immediately in fear of arrest. Both are fraud. Both carry refund rights. Here is what the law gives you.

How do I know if an HMRC contact is genuine?

HMRC does not send texts or emails with links asking for bank details or card payments. Genuine HMRC letters arrive by post to your registered address. HMRC will not threaten immediate arrest for unpaid tax or demand payment in gift cards, iTunes vouchers, or cryptocurrency. If you receive a suspicious HMRC contact, do not click links — instead go directly to gov.uk/contact-hmrc to verify.

I transferred money believing I owed tax. Can I get a refund?

Yes, in most cases. Bank transfers made under the false belief that you owed HMRC money are APP fraud — your authorisation was procured by deception. The PSR Mandatory Reimbursement Scheme (in force from 7 October 2024) requires your bank to refund you up to £85,000. The fact that you believed the payment was a legal tax obligation is evidence of the deception, not evidence against your claim.

I clicked a link and entered my card details on a fake HMRC website. What are my rights?

If card details were used to make unauthorised payments, those are covered by Payment Services Regulations 2017 regulation 76. Your bank must refund promptly. Contact the bank immediately to report the fraud and cancel the card. Also report to Action Fraud and to the National Cyber Security Centre via report.ncsc.gov.uk.

The caller said there was a warrant out for my arrest. I was terrified and transferred money immediately. Does fear reduce my claim?

No — quite the opposite. The use of threats of arrest or prosecution is a recognised characteristic of impersonation fraud. The PSR scheme and Financial Ombudsman Service both recognise that a victim acting under intense fear of legal consequences is being deliberately manipulated, which supports rather than undermines your claim. Vulnerable consumers who were especially susceptible to such pressure receive additional protections.

Can I claim the HMRC tax rebate I was promised, even though it was fake?

The fake rebate itself was the scam — no real money was owed to you by HMRC, and no refund from HMRC is available. Your claim is entirely against the bank that processed your payment to the scammer. The PSR scheme and the Financial Ombudsman Service deal with your bank's refund obligation, not with any supposed tax entitlement.

I paid in iTunes gift card codes over the phone. Can I still claim?

Gift card payments are more complex. They do not go through the banking system in the same way and are generally not covered by the PSR APP fraud scheme. However, if the scammer also obtained your bank account details and made subsequent transfers, those transfer payments may be claimable. Report all payments to Action Fraud regardless of method.

Scam Refund · Scam Types

HMRC tax scam refund — fake rebates, fake demands, and how to claim.

The two main HMRC scam types

HMRC fraud divides broadly into two categories. Both are impersonation of a government authority — Authorised Push Payment (APP) fraud or phishing — but they work differently and trigger different legal remedies.

The tax-rebate phishing scam

You receive a text, email, or WhatsApp message claiming to be from HMRC and telling you that you are owed a tax refund — typically between £200 and £2,000. A link takes you to a site that closely mimics the HMRC or Government Gateway website. You are asked to enter your bank details or card details to “receive” the rebate. Either your card is then charged (harvesting your card for later fraud), or the fake site captures your bank login credentials for account takeover.

Action Fraud receives hundreds of thousands of these reports annually. HMRC’s own fraud reporting service (phishing@hmrc.gov.uk) received over 180,000 reports in 2023. No rebate ever arrives. Instead, the scammer now has your financial credentials.

The fake tax-debt threat scam

You receive an automated or live phone call claiming to be from HMRC (sometimes “the HMRC fraud investigation team”) telling you that you owe unpaid tax and that a warrant for your arrest has been issued. You are told to make an immediate bank transfer or purchase gift card codes to avoid prosecution. The caller may stay on the line while you visit your bank or buy the gift cards, coaching you on what to say.

The threat element is deliberate. Fear of arrest overrides normal caution. Victims sometimes transfer thousands of pounds within the hour. The real HMRC does not make calls of this kind, does not demand payment in gift cards or cryptocurrency, and does not threaten immediate arrest for tax debts.

Red flags that it is not HMRC

• HMRC never contacts you by text with a link to claim a rebate — genuine rebates are processed through your tax account at gov.uk.
• HMRC never demands payment in gift cards, iTunes codes, or cryptocurrency.
• HMRC never threatens immediate arrest on a cold call.
• HMRC never asks you to call a different number than the one on gov.uk.
• Caller ID saying “HMRC” is not verification — caller ID can be spoofed.
• Emails from HMRC come from @hmrc.gov.uk or @tax.service.gov.uk domains — check carefully for typosquatting.

What to do in the first 24 hours

• If you made a bank transfer:
• Call your bank’s fraud line immediately. Ask them to attempt a payment recall. Tell them this is HMRC impersonation APP fraud.
• If you entered card details on a fake site:
• Cancel the card immediately. Ask the bank to review for any unauthorised transactions.
• Screenshot everything
• — the text, email, the fake website, call logs, and payment confirmations.
• Report to Action Fraud
• at actionfraud.police.uk. Obtain your crime reference number (CRN).
• Report to HMRC directly
• by forwarding the phishing message to phishing@hmrc.gov.uk or calling the HMRC fraud line.
• Report the fraudulent URL
• to the NCSC at report.ncsc.gov.uk.
• Check your Government Gateway account
• for any unauthorised access if you entered login credentials.

Your legal refund options

PSR Mandatory Reimbursement Scheme (bank transfers)

If you transferred money by bank transfer (Faster Payments or CHAPS from a UK account), this is APP fraud covered by the PSR Mandatory Reimbursement Scheme in force since 7 October 2024 under the Financial Services (Banking Reform) Act 2013. Your sending bank must reimburse you up to

per claim within five working days of receiving your report, or write to explain why it will not.

The only defence available to the bank is gross negligence — a standard deliberately set high by the PSR. Acting under threat of arrest from a caller impersonating a government authority is not gross negligence: it is the intended effect of the scam. The FCA’s Consumer Duty (Principle 12) also places an active obligation on banks to detect and prevent fraud of this kind, not merely to warn customers. A

applies to non-vulnerable consumers; those acting under extreme duress may qualify as vulnerable.

Unauthorised payment fraud (card details stolen)

If card details were harvested via a phishing site and used to make charges you did not authorise, regulation 76 of the Payment Services Regulations 2017 requires your bank to refund the unauthorised amounts promptly. The burden is on the bank to show the charge was authorised by you.

Section 75 Consumer Credit Act 1974

For credit card payments to the scammer between £100 and £30,000, Section 75 of the Consumer Credit Act 1974 creates joint liability between your credit card issuer and the supplier (the fraudulent “HMRC” service). The issuer cannot escape this liability because the “supplier” was fraudulent — that is precisely the misrepresentation that triggers the section.

• Report to bank and Action Fraud.
• Within 5 working days:
• Bank must reimburse or provide written reasons (PSR scheme).
• Bank must issue final response letter under FCA DISP rules.
• Within 6 months of final response:
• Escalate to the Financial Ombudsman Service.
• Within 13 months of last payment:
• Must bring PSR claim to the bank.
• Civil claim under Limitation Act 1980 s.5 as outer limit.

How banks refuse — and how to push back

“You were warned about suspicious calls before making the transfer.”

Ask the bank to specify which warning, its exact content, and whether it specifically addressed HMRC impersonation fraud conducted under threat of arrest. Generic fraud warnings shown at account opening do not satisfy PSR requirements for contemporaneous, specific warnings.

“You should have hung up and called HMRC directly.”

The scam was specifically designed to prevent this: the caller created urgency, threatened immediate arrest, and may have told you that calling back would be treated as evasion. A victim acting under these induced conditions is not reckless — they are being manipulated. The FOS consistently finds that induced urgency undermines the bank’s gross-negligence argument.

“Our staff asked if you were transferring to someone you knew and you said yes.”

You may have said yes because the scammer coached you to do so, or because you genuinely believed you were paying a government authority. The scripted coaching of victims to bypass bank checks is a characteristic of this fraud type. The FOS takes account of the coaching dynamic and does not treat a coached answer as a knowing misrepresentation.

Read our full guide on

. If the call also instructed you to move money to a “safe account”, see our

after a bank refusal, see our dedicated guide.

Ready to claim your refund?

We build your PSR-aligned bank complaint and Financial Ombudsman pack for a fixed £49. No CMC fees. You keep every penny.

Not legal advice. This guide is for general information only. For advice specific to your circumstances, consult a regulated legal professional or contact Citizens Advice.