Common Tax Refund Scams During Tax Season
During tax season, numerous fraudulent tax refund notifications impersonating the Inland Revenue Department (IRD) appear online. These messages typically include seemingly legitimate links that prompt users to log into their online banking accounts, with the intent to steal personal banking credentials for fraudulent transactions.
Official IRD Tax Refund Procedures
The IRD tax refund process follows strict protocols. Users can verify message authenticity using the following key points:
- Tax refunds are issued via cheque sent by ordinary mail.
- The process does not require provision of bank account details or online banking login.
- Official IRD website URLs end in ".gov.hk", not ".com" or other commercial domains.
For the latest information, please visit the official IRD website: https://www.ird.gov.hk/eng/welcome.htm
How to identify official SMS messages
Hong Kong’s IRD has joined the “SMS Sender Registration Scheme”. All official SMS messages from the IRD must display a sender name that begins with a “#” (for example: #IRD or #TAX; please verify the IRD’s exact registered sender name). If you receive a message claiming to be from the IRD but without a “#”, it is highly likely to be a scam.
Response Steps for Suspicious Messages
- Do not click links, download attachments, or enter any personal information (including banking login credentials, one-time passwords, or credit card details).
- Verify message indicators: Check if it uses "tax refund" as bait, imposes time pressure, or features suspicious domain names.
- Confirm directly through official websites or channels—never use links provided in the message.
- If a link has been clicked or information entered, immediately change passwords, contact your bank, and retain screenshots as evidence for reporting.
Act Now
Network security allows for no compromise. As a 1O1O client, you are protected by Hong Kong's most robust mobile safety net. If in doubt, WhatsApp 1O1O's Anti-Fraud Specialists 6828 1010 immediately, and let our experts be your strongest shield.
FAQ
Q1: Will the IRD notify me of a tax refund via SMS or WhatsApp?
A: No. Refunds are issued by cheque via ordinary mail, and the IRD will not ask you to log in or provide information via SMS/email. See the IRD website for details.
Q2: How can I spot a fake tax refund link?
A: Check the domain—it must be “.gov.hk”. Scam links often use lookalike domains such as “ird-login.com”.
Q3: How does the “SMS Sender Registration Scheme” work?
A: Commercial SMS senders must register their sender IDs. You can verify them instantly on the OFCA website; unregistered senders are more likely to be scams.
Q4: What should I do if I’ve already entered my banking details?
A: Change your passwords immediately, call your bank to freeze/protect your account, and report to the police while keeping evidence screenshots.
