"Your refund is ready — just confirm your bank details." No tax authority sends that message. Yet every spring, inboxes and voicemails fill with versions of it, some polished enough to fool a careful reader. Tax season is prime time for phishing because almost everyone is either expecting money, waiting on a status update, or quietly worried they owe something. Scammers don't need to understand tax law. They only need you to be tired, rushed, or half-hoping the number on the screen is real.

Fake tax messages follow patterns. Once you recognise the patterns, most of them fall apart in seconds.

Why Tax Pressure Works So Well

The window is narrow. From late January through mid-April, millions of people are checking the same thing at the same time: where is my money? Add a smaller autumn wave for extension filers, and you have months of built-in urgency that scammers can borrow for free.

Two details make tax scams unusually effective. First, you might genuinely be owed a refund, so a message about money isn't automatically suspicious. Second, the subject is complicated enough that most of us aren't certain what the real process looks like — which is exactly the gap a fake message slides into.

Legitimate tax agencies are boring. They write by mail, they reference a notice number, and they tell you to log in yourself rather than handing you a convenient link. Anything that arrives with drama — a deadline of hours, a threat, a "verify now" button — is working against that pattern.

Red Flags in a Fake Refund Email or Text

• The sending address doesn't match the agency. The display name says something official, but the actual address behind it is a lookalike domain or a free mailbox. Hover over or tap the name to see the real address.
• A generic greeting. Real notices come by post with your name and usually a notice or reference number. "Dear Taxpayer" is a template line.
• A link to log in and claim, confirm, or release your refund. This is the whole point of the message. It leads to a page built to capture your credentials.
• Requests for sensitive data in the message itself — bank account and routing numbers, card details, your Social Security number, a PIN, or a photo of your ID.
• Countdowns and threats. "Within 24 hours," account suspension, arrest, a warrant, a revoked licence. Real agencies don't negotiate by countdown.
• Odd attachments. A "refund statement" that's actually an HTML file, a password-protected zip, or a document that asks you to enable macros.
• Details that don't fit you. A refund for a year you didn't file, a state you've never lived in, or an amount that's close to but not quite what you expected.

One flag alone might be carelessness. Two or three together is a scam. And remember: text messages count. A short SMS claiming your refund is "on hold" is the same trick with fewer words.

When the Phone Rings

Caller ID proves nothing. Numbers are easy to spoof, which is why a call can appear to come from a government office, a local area code, or even your own number. The script is usually one of three: your refund needs verification, your tax file has a problem, or you owe money and must pay right now.

What real tax agencies do not do: demand immediate payment by gift card, prepaid debit card, wire transfer, or cryptocurrency; ask for card numbers over the phone; threaten arrest or deportation; or ask for your Identity Protection PIN. If a caller pushes any of those, it's a scam regardless of how official the voice sounds.

What a legitimate contact looks like

Initial contact about a tax issue normally arrives by mail. If someone does call, they should be able to reference a notice you've already received, and they won't mind you saying: "I'll hang up and call the number published on the official website." A real agent expects that response. A scammer will resist it, argue, or pressure you to stay on the line.

How to Verify Your Refund Status the Official Way

1. Close the email or text. Don't use any link or phone number it contains.
2. Open a fresh browser window and type the official address yourself — the tax agency's main site, then its refund tool.
3. Use the refund tracker with your taxpayer ID, filing status, and the exact refund amount from your return. It usually refreshes once a day, often overnight, so checking repeatedly in one afternoon tells you nothing new.
4. If you filed through a preparer or software, log into that account directly to see status and any messages.
5. For a state refund, go to your state's revenue or taxation department site, not a link from a message.
6. Call only a number you looked up yourself.

Expect a wait. Electronically filed returns with direct deposit are commonly issued within about three weeks, while paper returns take longer. Returns claiming certain credits are held longer by law. Lack of instant money is not evidence of a problem — and it's certainly not a reason to click anything.

If You Already Clicked, Replied, or Paid

Act quickly and in this order.

• Entered a password: change it immediately, especially for email and tax software, and turn on two-factor authentication.
• Gave bank or card details: call your bank or card issuer now. Ask about freezing the account or issuing new numbers.
• Gave your Social Security number: report it through the tax agency's identity theft resources and file a report with the FTC's identity theft site. Consider requesting an Identity Protection PIN and placing a freeze with the credit bureaus.
• Paid by gift card: contact the card issuer straight away. Speed matters more here than anywhere else.
• Received the message: forward phishing emails to the tax agency's phishing reporting address and report the message to the FTC.

If money has moved or someone has filed a return in your name, involve your bank and a tax professional. This is general guidance, not tax or legal advice.

The Two-Minute Habit That Beats Most Tax Scams

Never act from a message. If something claims your refund needs attention, close it, open a browser, and go to the official site yourself. That single habit removes the scammer's only advantage — being the one who controls where you land.

While you're at it, file as early as you reasonably can, share your taxpayer ID only where it's genuinely required, and keep refund amounts and account details out of group chats and social posts. A little boredom around tax season is a feature, not a flaw.

Photo: stevepb / Pixabay