How It Works
Scammers impersonate Inland Revenue (IRD) and contact you by text, email, or phone, claiming that you are owed a tax refund and asking you to provide your bank account details to receive the payment. Once you share your details, your account may be accessed directly.
In another common version, the scammer claims you owe tax or that there is an irregularity in your account, threatening that police will become involved unless you pay immediately. They may direct you to call a "IRD number" to verify — which connects you to the scammer.
These scams tend to be more active around the end of the tax year in March–April and during the personal tax refund period from May to July. Extra vigilance is advised during these months.
How to Spot a Scam
- Never click on links in texts or emails about tax refunds or payments. To check your tax account, log in directly to myIR at myir.ird.govt.nz.
- Genuine IRD email addresses end in @ird.govt.nz. IRD does not include specific refund amounts in emails.
- IRD sends text messages using four-digit short codes — not regular mobile phone numbers.
- IRD will never threaten arrest over the phone or ask for your internet banking login credentials or one-time verification codes.
- IRD does not accept payment by gift cards, iTunes cards, cryptocurrency, or prepaid debit cards.
- If you receive a suspicious call, hang up and call IRD directly on 0800 775 247 to verify.
- Suspicious emails can be forwarded to phishing@ird.govt.nz.
What to Do If You Have Been Targeted
If you have provided your bank details to a scammer, contact your bank immediately and ask them to protect your account. If your driver licence details were shared, contact NZTA to apply for a replacement, which will invalidate the compromised licence number. If you believe your identity documents have been compromised, IDCARE can provide free specialist support: https://www.idcare.org/.
- Contact your bank immediately, explain the situation, and ask them to freeze or protect your account.
- Keep all evidence — text messages, emails, transfer receipts, screenshots, phone numbers, and payment details.
- If you wish to report it to police, visit a police station or call the non-emergency number 105.
- If you believe your identity information has been compromised, contact IDCARE for specialist support: https://www.idcare.org/
Do not use the link in the message. Open the myIR address you already know, then call back using a number from the IRD website or your existing records — never a number supplied by the caller.