Tax-refund fraud usually means your identity is loose — lock everything else it could open.
What to do
- Set up an IRS IP PIN, HMRC verify identity, or ATO myGovID strong identity proofing
- Switch the tax-portal account to authenticator-app 2FA
- Place a fraud alert / credit freeze with the credit bureaus
- Notify your employer / payroll to confirm tax codes and bank details haven't been changed
- Watch for follow-up phishing pretending to be 'the tax office' about your case
Was this guide helpful?
Know someone who needs this? Send them the guide.
JD
Written by
Jordan DicksonFounder, CyberSecurityGuides
Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.
Reviewed by CSG Security Engineers