How to spot an IRD tax refund scam

How it works

Scammers impersonate Inland Revenue, and sometimes Police, by text, email or phone. Netsafe says the two common versions are:

• “You’re owed a refund”: click a link and enter your bank details to receive it.
• “You owe tax”: pay now or face Police action.

Either way, the aim is your bank details, myIR login or identity information. Netsafe reported tax refund scam reports rose 44% in May 2026 compared with April, and warned they spike around tax time, from May to July.

How to tell

Based on Netsafe’s advice:

• Real IRD emails come from an address ending in @ird.govt.nz, and IRD won’t include your refund amount in an email.
• Real IRD texts come from four-digit short codes. IRD doesn’t text from ordinary mobile numbers.
• IRD won’t threaten arrest on the phone, and won’t ask you to log in to your bank during a call.
• IRD never asks for payment by gift card, iTunes card or prepaid card.
• Don’t click links about refunds or payments. Log in to myIR directly through the IRD website.

If you’re unsure about a call, hang up and call IRD yourself on 0800 775 247.

If you’ve been caught

1. Call your bank straight away if you shared bank or card details.
2. Change your myIR password if you entered it on a fake site, and anywhere you reused it.
3. Get a new driver licence through NZTA if you shared licence details, and consider a credit file suppression.
4. Contact IDCARE (0800 121 068) for free identity support.
5. Forward scam emails to phishing@ird.govt.nz and scam texts to 7726.
6. Report to Netsafe: 0508 638 723, text “Netsafe” to 4282, or online.