An unexpected WhatsApp message saying you are owed an income-tax refund should be treated as suspicious. Do not reply, tap its links, open attachments, or send identification, banking, card, password, or one-time-code details. Instead, open your tax authority’s website or taxpayer account yourself, check whether a refund is recorded, and use that authority’s published fraud-reporting process. If you already shared information, contact the tax authority’s security or fraud team and any affected financial institution through independently verified channels.
Contact practices differ by country, so an agency’s rule is not automatically a rule for every tax office. The safe constant is to verify outside the message and report through an official channel you locate independently.
As an Amazon Associate I earn from qualifying purchases.
What to do in the first five minutes
- Stop interacting. Leave the chat. Do not answer questions, press buttons, call a number in the message, scan a QR code, open a file, or follow a shortened URL.
- Preserve evidence. Keep the message until you have followed your authority’s reporting instructions. Take a screenshot if the authority requests one, and note the sender number, links, bank details, and any deadline or threat.
- Verify separately. Type your tax authority’s known web address into the browser, use a bookmark you created previously, or open its official mobile app. Sign in there to look for a refund notice; never use the WhatsApp message to authenticate itself.
- Report locally. Find the current phishing, scam, or impersonation page on the official tax authority site and submit the evidence in the format it specifies.
- Secure exposed information. If you entered a password, payment detail, identity number, or verification code, change the affected password from a trusted device, call the relevant bank or card issuer, and notify the tax authority’s security or identity-theft channel.
Do not forward the message to friends or coworkers as a warning while it contains your own tax number, address, phone number, or account information. Redact those details or direct people to the authority’s public warning page.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesWhy a refund offer is a common scam hook
Refunds create a believable reason for an agency to contact someone and an incentive to act quickly. The US Internal Revenue Service (IRS) identifies unexpected contact, pressure or threats, promises of refunds or credits, and demands for personal or financial information as warning signs. A WhatsApp message that combines several of these elements is risky even if it uses a logo, a familiar agency name, or your correct name.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Language that should make you pause
- A claim that a refund, rebate, credit, or overpayment is waiting for you when you were not expecting a notice.
- A short deadline, threat of a fine, arrest, account closure, or loss of the refund if you do not respond immediately.
- Requests for a tax identification number, passport or national-ID image, date of birth, bank login, card number, PIN, password, or one-time code.
- A demand to pay a fee, “release charge,” gift card, cryptocurrency, or transfer before a refund can be sent.
- A link to a domain that is misspelled, uses an unrelated country or company name, or hides its destination behind a URL shortener.
- Unexpected attachments, QR codes, voice notes, or instructions to install an app or move the conversation to another number.
Why appearance is not proof
Scammers can copy seals, colors, signatures, case numbers, and writing styles from a tax authority. They may include partial information obtained from data breaches or public records. A verified WhatsApp profile, display name, or familiar telephone prefix does not establish that the sender is an agency. Treat the channel and the requested action—not the branding—as the evidence to evaluate.
Could your tax office contact you on WhatsApp?
There is no worldwide rule. Each authority sets its own channels and may change them. The following policies are country-specific examples, not universal instructions.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
| Authority | What its published guidance says | How to use that information |
|---|---|---|
| HM Revenue & Customs (United Kingdom) | HMRC says it will not tell people about a tax rebate or penalty, or request personal or payment information, in messages including apps such as WhatsApp. | A WhatsApp refund demand claiming to be HMRC conflicts with that policy. Readers outside the UK must check their own authority instead. |
| Belastingdienst (Netherlands) | The Dutch Tax Administration says it does not send payment requests through WhatsApp or SMS, ask for personal details in a message, or threaten fines or urgent action through those messages. | Those features are strong warning signs for a supposed Dutch tax message, but the policy should not be generalized to another country. |
| Canada Revenue Agency | The CRA says it does not use text or instant messaging such as WhatsApp and warns about fake GST/HST refund or credit approaches. | A Canadian recipient should verify through the CRA’s official account or website and follow its current scam-reporting route. |
| Other countries | Practices vary. Some agencies may use text or messaging for limited notifications while prohibiting requests for credentials or payments there. | Read the current contact and fraud guidance on your own authority’s official site; do not rely on a policy quoted in the message. |
How to verify a refund without giving the scammer information
- Close the WhatsApp conversation. Do not ask the sender to prove the claim. A reply confirms that your number is active and can invite more targeted attacks.
- Reach the authority independently. Use a previously saved bookmark, a statement you already trust, or a search engine result that you cross-check against the authority’s known domain. Do not click a result that imitates the authority or use a link copied from the message.
- Sign in only on the official service. Check the taxpayer dashboard, correspondence area, refund status, or notices. The exact labels differ by country; if you cannot find the information, use the authority’s published telephone number or secure-message facility.
- Check the payment destination. A genuine record should explain how a refund is calculated and where it will be paid according to your existing tax records. A WhatsApp request to “confirm” a new bank account or card is not a safe verification method.
- Ask through a known channel if uncertainty remains. Tell the representative that you received an unsolicited WhatsApp message and ask whether the authority uses that channel. Do not read back passwords or one-time codes to an unsolicited caller.
The Federal Trade Commission’s tax-refund warning likewise advises people not to use a link in an unexpected message. Verification must start from a route you chose, not one supplied by the sender.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteHow to report the message
General reporting sequence
- Record what the authority asks for. Keep the screenshot and note the sender number, web address, bank account, phone number, and exact wording if those details are requested. Do not collect more personal data than necessary.
- Open the tax authority’s official fraud page independently. Search for terms such as “phishing,” “scam message,” or “impersonation” on the authority’s site. Confirm the page is on the government or agency domain before using an email address or form.
- Submit through the current channel. Some authorities use email, some use web forms, and some request forwarding of a copy of the text. Follow the instructions for your jurisdiction and retain the confirmation if one is provided.
- Delete after reporting when instructed. HMRC and the Dutch Tax Administration include deletion in their reporting directions. If your authority asks investigators to retain the original, follow that instruction instead.
- Report the WhatsApp account separately if appropriate. WhatsApp’s in-app report and block controls can reduce further contact, but they do not replace notifying the tax authority. Preserve the evidence before blocking.
Contact details can change. Recheck the authority’s live official instructions immediately before sending a report rather than assuming an address copied from an older article is still valid.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Examples of official routes by jurisdiction
| Jurisdiction | Evidence and route described by the authority | Important qualification |
|---|---|---|
| United Kingdom | HMRC says to screenshot an in-app message such as WhatsApp and email it to [email protected]. Its guidance also says HMRC does not message people about tax rebates or penalties or ask for personal or payment information in messages. |
Confirm the current HMRC page and address before sending; readers elsewhere should use their own authority. |
| Netherlands | The Belastingdienst asks for a screenshot, the sender number, any bank account or website mentioned, and the message’s tone or urgency, sent to [email protected]; it then instructs recipients to delete the message. |
Use this as an example of requested evidence, not as a reporting address outside the Netherlands. |
| United States | IRS guidance accepts an email or a copy of a text message at [email protected] and separately explains how to report tax scams and suspected identity theft. |
The cited guidance refers to email or text. Do not describe that address as a WhatsApp-specific route unless the current IRS page says so. |
| Canada | The CRA says it does not use text or instant messaging such as WhatsApp and describes fake GST/HST refund or credit approaches. | Use the current CRA scam page or taxpayer account to locate its reporting instructions. |
| India | The Income Tax Department instructs recipients not to reply, open attachments, or click links in suspected impersonation messages and provides an email route for reporting impersonation. | Check the department’s current official “Report Phishing” instructions for the applicable address and required evidence. |
If you clicked, opened a file, or entered information
You clicked a link but entered nothing
Close the page, do not download anything else, and do not return through the message. If a file downloaded, do not open it; delete it after your device’s security software has checked it. Update the operating system and browser, run a reputable security scan, and watch for unusual sign-in alerts. Continue with independent verification and reporting.
You entered a username or password
- From a trusted device, change the password at the real service, not at the page opened from WhatsApp.
- Change any other account that reused that password.
- Enable multifactor authentication using the tax authority’s supported method.
- Review recent sign-ins, recovery email addresses, phone numbers, and forwarding rules; remove changes you did not make.
- Tell the authority that credentials were exposed and follow its identity-theft instructions.
You supplied bank, card, or payment details
Call the bank, card issuer, or payment provider using the number on its card or official statement. Explain exactly what was shared and when; ask whether payments, transfers, replacement cards, or account holds are needed. Monitor statements and alerts. If you sent money, say so immediately because recovery options can depend on how and when the payment was made.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
You supplied identity documents or tax numbers
Notify the tax authority’s security or fraud team and ask what protective measures apply in your country, such as an account flag, identity-theft report, replacement document, or additional verification. Keep a timeline of the message, information disclosed, calls made, and case numbers. Follow law-enforcement or national identity-theft reporting instructions where the authority directs you.
Free tools Windows power users keep installed
One-click scans. No signup required.
HMRC specifically tells people who gave personal information in response to a suspicious message to contact its security team. IRS guidance directs people who suspect fraud or stolen information to its fraud and identity-theft resources. These follow-up routes are more important than buying a commercial monitoring product.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Preserving evidence while protecting yourself
- Capture the full conversation, including the profile name, phone number, timestamps, links, and attachments list, if the authority requests a complete record.
- Store screenshots in a private location. Crop or redact your tax number, address, account number, QR code, and unrelated private chats before sharing evidence publicly.
- Copy a suspicious URL as plain text only if the reporting form asks for it; do not open it to test where it leads.
- Record the message’s pressure tactics—such as a deadline, threat, or promise of a specific amount—because investigators may use wording to connect campaigns.
- Do not edit the original message before the authority has received the evidence. After reporting, follow its retention or deletion instruction.
Common mistakes that make a scam worse
- Replying to “check.” This confirms an active number and can trigger a live conversation with a scammer.
- Calling the number in the message. A scammer can answer as a fake agent or transfer you to another fraudster.
- Using the message’s link to log in. A padlock icon or familiar logo does not prove that the destination belongs to the tax authority.
- Sending a small payment first. A fee, tax, or deposit request is not made legitimate by its size.
- Posting the number publicly. Public reposts can expose personal data and may direct others to malicious links. Report through official channels instead.
- Assuming silence means safety. If you disclosed credentials or financial details, take the recovery steps even if no money has yet moved.
A simple decision guide
| What happened? | Next action |
|---|---|
| You only received the message. | Do not interact; preserve requested evidence, verify through the official tax service, report, then delete if instructed. |
| You clicked but did not submit information. | Close the page, avoid downloads, scan and update the device, then report and monitor accounts. |
| You submitted a password or code. | Change the password from a trusted route, revoke suspicious sessions, enable multifactor authentication, and notify the authority. |
| You submitted bank or card data or sent money. | Call the financial institution immediately through a known number, request protective action, and notify the tax authority’s fraud channel. |
| You submitted identity or tax documents. | Contact the authority’s security or identity-theft team, document the incident, and follow national identity-protection guidance. |
What a legitimate refund process normally looks like
A genuine refund is recorded in the tax authority’s own systems, tied to a return or assessment, and handled through the contact methods the authority publishes. The exact timing, payment method, and notification channel depend on the country and tax year. A legitimate process does not require you to bypass the authority’s account, surrender a password or one-time code to a chat participant, or pay an improvised release fee through a messaging conversation. When a message conflicts with the authority’s published contact policy, trust the independently verified policy and account record—not the message.
Quick Recap
Before you close the incident
- Confirm that the report went to the correct authority for your residence or filing jurisdiction.
- Save the report reference, bank case number, and identity-theft case number in a secure note.
- Check tax, email, banking, and payment accounts for unauthorized changes over the following weeks.
- Tell anyone whose information appeared in the message only after removing your own sensitive data.
- Use the authority’s later instructions for account recovery, document replacement, or additional verification.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
