In short
How do I report a fake HMRC message?
Forward a suspicious text to 60599 (charged at your network rate) and a suspicious email to phishing@hmrc.gov.uk, then delete it. For a message in an app such as WhatsApp, email a screenshot to phishing@hmrc.gov.uk. Report a suspicious call through HMRC's online service, and a social media account you can't verify to branddefence@hmrc.gov.uk. HMRC says it will never ask for personal or financial information by text or email.
Where to report each type of message
- Text message: forward it to 60599. You're charged at your network rate.
- Email: forward it to phishing@hmrc.gov.uk, then delete it.
- Message in an app, for example WhatsApp: take a screenshot and email it to phishing@hmrc.gov.uk.
- Phone call asking for personal information or threatening a lawsuit: use HMRC's online service to report a suspicious call. You'll need to give your email address or sign in.
- Social media account you can't verify: email the details to branddefence@hmrc.gov.uk and ignore the account.
- Letter: contact the HMRC team the letter says it's from, for example the Self Assessment team.
HMRC may share your email address and phone number with other organisations when that's needed to close a scam down.
How to tell a genuine HMRC message
- HMRC does send some texts, for example to confirm a Self Assessment refund is being processed or to say you're due a P800 refund after an unanswered letter. HMRC says those refund texts don't contain links to websites.
- When HMRC does include a link in a text, it's to GOV.UK information or HMRC webchat.
- HMRC will never ask for personal or financial information when it sends a text.
- HMRC only emails about a tax rebate, or asks for personal or payment information by email, from an address ending in hmrc.gov.uk. Scammers can fake the display name, so the name alone proves nothing.
- HMRC doesn't use social media to offer a tax rebate or ask for personal or financial information.
- HMRC may call you or leave a voicemail from 0300 200 3884, which isn't a general enquiries line. It won't ask for personal or financial information on the call.
Not sure? GOV.UK has a list of genuine HMRC contacts, updated as new campaigns start. Check it before you reply or call back.
If you already replied
- 1Email the HMRC security team at phishing@hmrc.gov.uk. Say briefly what you disclosed (for example name, address, HMRC User ID, password), but don't put the details themselves in the email.
- 2If you gave bank or card details, call your bank on the number on your card.
- 3If you lost money, report it to Report Fraud (0300 123 2040) in England or Wales, or to Police Scotland.
Frequently asked questions
I got a text saying I'm owed a tax refund, with a link. Is it real?
Treat it as a scam. HMRC says its refund texts don't include links to websites and that it never asks for personal or financial information by text. Don't open the link: forward the text to 60599 and delete it.
Is 60599 the same as 7726?
No. 60599 is HMRC's own number for texts pretending to be from HMRC; it's charged at your network rate. 7726 is the free number for reporting any scam text to your phone provider: see scam texts and 7726.
Can you get my tax refund or HMRC account back?
No, that's HMRC's own process. We help with hacked social media and messaging accounts, through the platforms' official processes only: tell us what happened.
Official sources
The platforms' own help and policy pages. We are not affiliated with them.
- GOV.UK: Report suspicious HMRC emails, texts, social media accounts and phone callsgov.uk
- GOV.UK: Report scam HMRC messages, calls and social media accountsgov.uk
- HMRC: Check if a text message you've received from HMRC is genuinegov.uk
- HMRC: Check if a phone call you've received from HMRC is genuinegov.uk