Your weekly dose of scam-proofing in 3 minutes or less. No fluff, just the latest hacks, scams, phishing attacks, and cyber cons you actually need to know about.
🚨 SCAM OF THE WEEK: Tax Scams
When the taxman calls, and it is not the taxman.
What is a Tax Scam?
You get a call. It is someone from the tax authority — HMRC, the IRS, the ATO, SARS, the CRA, take your pick. You owe unpaid tax. A warrant has been issued.
If you do not pay today, you will be arrested. Or the message is the opposite. Good news. You are owed a refund. Click here to claim it before it expires. Here is the thing most people do not want to admit: when you get either of those messages, there is a moment, maybe just a second, where you wonder if it might be true. “Could I have made a mistake? Could something have slipped through?”
That moment of doubt is exactly what scammers are selling to. They do not need you to be careless. They just need you to be human.
Monthly tax scam reports have increased by 323% since 2020, reaching a record high of 368 cases per month in 2025. In the UK alone, HMRC received more than 135,500 scam reports in a single ten-month period and was forced to shut down nearly 25,000 fake websites and phone numbers.
🧠 How It Works
The contact arrives.
It comes by phone, text, email, or even a letter. It claims to be from your national tax authority.
The threat version says: “You owe unpaid tax. A warrant has been issued for your arrest. Call this number immediately to avoid legal action.”
The refund version says: “You are owed a tax refund. Click here to verify your bank details and receive your payment within 24 hours.”
The pressure builds.
Scammers layer in everything that makes you act without thinking. Deadlines. Threats of arrest, deportation, or wage garnishment. A sense that if you ask questions or hang up, things will get worse. The refund version runs under a different pressure: urgency and expiry. Your refund will lapse. The window to claim is closing. Act now.
The payment request.
This is where the scam reveals itself, if you know what to look for. Real tax authorities do not ask for payment by:
Gift cards or vouchers
Cryptocurrency
Immediate bank transfer to an unfamiliar account
Wire transfer to settle a “pending warrant” Scammers use these methods because they are fast, difficult to trace, and almost impossible to reverse. Once the money moves, it is gone.
The information harvest.
Not all tax scams want immediate payment.
Some are after something more valuable: your identity. They ask you to “verify your account” by entering your National Insurance number, Social Security number, Tax File Number, or banking details into a fake website that looks exactly like the real one. That data gets sold, or used to file fraudulent tax returns in your name, redirect legitimate refunds to criminal accounts, or open credit without your knowledge.
💥 Why It Works
Tax authorities carry automatic weight. The names HMRC, IRS, ATO, SARS carry institutional authority that scammers borrow for free. A threatening message that appears to come from your government does not get the same scepticism as a message from an unknown company.
It gets a spike of anxiety instead. On top of that, most people are not entirely certain their tax affairs are in perfect order. There is usually something — a form you were not sure about, a year you filed late, a deduction you might have got wrong. Scammers do not need to know anything about your actual tax situation. They just need to call at the right moment and let your own uncertainty do the rest. And the timing is not random. These scams spike sharply around filing deadlines, before the 31 January self-assessment deadline in the UK, between January and April in the US, and through the July-to-October tax season in Australia.
Scammers treat tax season the way retailers treat Christmas. It is a predictable window where you are already thinking about tax, already expecting correspondence, and already operating under pressure. The refund version runs a completely different play — optimism instead of fear, but lands in exactly the same place.
🙈 Real-world Facepalms
UK — HMRC, 2025: A phishing campaign compromised approximately 100,000 HMRC taxpayer accounts, resulting in £47 million ($63 million) in losses. Fraudsters used stolen credentials to file fraudulent PAYE and VAT repayment claims. Fourteen people were arrested across Romania and England in connection with the operation.
USA — IRS, 2025: The IRS reported over 600 social media impersonators during fiscal year 2025 alone. Monthly tax scam reports hit a record high, with Americans losing an average of $32,000 per successful scam in the first months of 2025.
Australia — ATO, 2025: In July 2025 alone, the ATO received 7,420 reports of impersonation scams — a 75% increase from the previous month. ATO impersonation email scams increased by more than 300% year on year.
Australia — real victim: A woman's mother-in-law lost $4,000 after a caller impersonating the ATO claimed she had an outstanding tax debt and threatened immediate legal action. She paid before anyone in the family knew what had happened.
These are not isolated incidents. They are running scaled operations that treat tax season as a commercial opportunity.
⚠️ Red Flags for Customers to Watch Out For
🚩 A call, text, or email threatening arrest, legal action, or wage garnishment for unpaid tax.
🚩 Any request to pay tax by gift card, cryptocurrency, or immediate wire transfer.
🚩 A refund offer that requires you to click a link and enter your bank details.
🚩 Urgency: the deadline is today, the warrant has been issued, and the refund expires in 24 hours.
🚩 A caller who will not let you hang up to verify the call independently.
🚩 Links in texts or emails that do not go to an official government domain.
🛡️ How Not to Get Played
Before anything else, remember this: no tax authority on earth collects debt in gift cards.
Not HMRC. Not the IRS. Not the ATO. Not any of them. If someone claiming to represent a government tax authority asks you to pay in gift cards, iTunes vouchers, Google Play credits, or cryptocurrency, hang up. That is the entire test. Everything else below is detail.
Know how your tax authority actually contacts you.
Every major tax authority follows the same basic rule: they do not call out of the blue to demand immediate payment, threaten arrest, or ask for personal information by phone or text. HMRC contacts you by post first. The IRS contacts you by mail before calling. The ATO will never send a text message containing a hyperlink. If the contact you received does not match how your tax authority actually works, it is not your tax authority.
Type, don't tap.
If you receive any message claiming to be from a tax authority and want to check whether it is real, go directly to the official website by typing the address into your browser. Do not click the link in the message. Do not call the number in the message. Find the official contact details independently and use those.
Hang up and call back.
If someone calls you claiming to be from a tax authority, hang up. Find the official number on the authority's website and call that number directly. A legitimate tax authority will have a record of any genuine outstanding issue. A scammer will not know what to do when you call back on a number they did not give you.
🔥 ONE-LINER HOT TAKE
No government collects taxes in gift cards.
That is it for this week.
Tax scams work because they borrow authority they have not earned. The name on the caller ID. The official-looking logo in the email. The weight of the word “arrest”. None of it is real. The institution being impersonated has no idea the call is happening. The defence is simple: slow down, go to the source directly, and remember that no government on earth collects tax debt in iTunes vouchers.
Catch you next time,
Dan & the Goldphish Team
P.S. Know someone who'd pay first and ask questions later? Forward this before tax season does the rest.
