Tax Season Scams: How to Spot IRS and HMRC Impersonators in 2026

 

Every tax season, criminals collect hundreds of millions of dollars from people who believe they're talking to the tax authority. The reason it works so well is simple: almost everyone feels a flicker of anxiety about taxes, and scammers weaponize that anxiety with threats and deadlines.

This guide covers the exact tactics used in the US, UK, and EU, the red flags that identify every one of them, and what to do if you've already engaged.

The Golden Rule of Tax Scams

⚠️ Tax authorities do not call, text, email, or DM you demanding immediate payment. The IRS, HMRC, and EU tax offices initiate contact by postal mail. They never demand payment in gift cards, cryptocurrency, or wire transfers, and they never threaten immediate arrest over the phone.

If you internalize only one thing from this article, make it that. It defeats the overwhelming majority of tax scams on its own.

The 6 Most Common Tax Scams

1. The threatening phone call

A caller claiming to be from the IRS or HMRC says you owe back taxes and police are on the way unless you pay right now. Caller ID may show a genuine-looking government number — caller ID is trivially spoofed. Real tax agencies give you written notice and appeal rights. Hang up.

2. The fake refund email

"You are eligible for a refund of $1,428. Click here to claim." The link leads to a convincing clone of the tax authority's site, which harvests your ID number, bank details, and date of birth — everything needed to steal your identity. Real refunds are processed automatically; you never need to "claim" one via a link.

3. Refund identity theft

A criminal files a tax return in your name before you do and redirects the refund to their own account. You discover it only when your legitimate return is rejected as a duplicate. The defense is filing early — and in the US, requesting an IRS Identity Protection PIN, which makes filing in your name without the PIN impossible.

4. The ghost preparer

A "tax professional" promises an unusually large refund, charges a percentage of it, inflates deductions, and refuses to sign the return. When the authority audits it, you are liable — the preparer has vanished. Legitimate preparers always sign returns and provide their registration number.

5. The smishing text

Short, urgent SMS messages: "HMRC: You have an outstanding tax rebate of £312.40. Claim here." These spike enormously around filing deadlines. Tax authorities do not text you about refunds.

6. Payment in gift cards or crypto

No government on earth accepts tax payments in Apple gift cards, Steam cards, or Bitcoin. This request is a 100% guaranteed scam with no exceptions. If someone asks, you are talking to a criminal.

Red Flags Checklist

• Urgency: "You must pay in the next 30 minutes" — real agencies give weeks and written notice
• Threats: arrest, deportation, license revocation over the phone
• Unusual payment methods: gift cards, crypto, wire transfer, payment apps
• Requests for full ID numbers or bank logins by phone or email
• Links in messages instead of directing you to log in yourself
• Refusal to provide written notice, a reference number, or an appeals process
• Promises of unusually large refunds from a preparer

How to Protect Yourself This Tax Season

1. File as early as possible — it's the single best defense against refund fraud.
2. Get an Identity Protection PIN (US) — free from the IRS, and it blocks fraudulent filings in your name.
3. Never click links in tax messages — type the official address yourself: irs.gov, gov.uk, or your national tax portal.
4. Verify your preparer's credentials and confirm they will sign the return.
5. Use strong, unique passwords and 2FA on your tax portal account.
6. Shred tax documents rather than binning them — dumpster diving is still a real vector.
7. Freeze your credit so stolen data can't be used to open accounts.

If You've Already Engaged With a Scammer

1. Sent money? Contact your bank or the gift card issuer immediately — speed matters, and funds are occasionally recoverable within hours.
2. Gave personal information? Freeze your credit, change your tax portal password, and enable 2FA.
3. Report it: US — report to the Treasury Inspector General and the FTC. UK — forward suspicious emails to HMRC's phishing address and report to Action Fraud. EU — report to your national tax authority and police.
4. Monitor your accounts closely for the next several months.

Final Thoughts

Tax scams succeed on emotion, not sophistication. The moment a "tax official" creates urgency, threatens you, or asks for an unusual payment method, you are talking to a criminal — every single time. Hang up, delete, and contact the agency yourself through its official website. That one habit protects you every filing season for the rest of your life.

Related reading: learn the wider pattern behind these attacks in our complete guide to spotting phishing emails.