Fake Covid Tax Refund Texts: How a Man Was Jailed
The text said you were due a Covid tax refund. The website looked exactly like a government page. It asked for everything a thief would need.
By Siddharth ShankarUpdated October 11, 2026The UK national fraud reporting service reported that a man was jailed for 30 weeks after sending more than 1,000 texts between March 22 and May 9, 2020 that posed as government and offered pandemic tax refunds. He obtained 191 sets of personal details and used 49, causing losses of £10,019.17 to at least 49 people. See what an exposed phone number means.
Your email is the key to most of your accounts. Has it already leaked?
Free · About 30 seconds · No sign-up · Email not stored
During the first months of the pandemic, many people expected government payments and support. That expectation is exactly what this scam used. It is also a reminder that phishing does not need sophisticated technology: a text, a copied website and a form can be enough.
What happened
The service reported that a man, aged 20, was sentenced to 30 weeks in prison after pleading guilty to fraud and possessing articles for use in fraud. He sent more than 1,000 texts, and call data showed about 1,200 over two days, posing as government authorities and offering pandemic tax refunds. One message read: "You are eligible for a Tax Refund as a result of the COVID-19 pandemic."
The offences took place between March 22 and May 9, 2020. He also impersonated a mobile network, Three UK.
How it worked
The texts linked to fake websites that looked identical to the real ones. Victims were asked to enter their name, address, card security number, mother's maiden name and passwords. Mother's maiden name is a common security question, so giving it up was dangerous well beyond one card.
The man obtained 191 sets of personal details and used 49 of them for fraud. A fraudster does not need to use every record. A handful is enough when each one can be turned into cash.
What was exposed
The victims typed full identity and card details into a lookalike government page. The security details were of particular concern, because answers like a mother's maiden name and passwords can be used to take over accounts or reset logins elsewhere.
How it ended
The man was jailed for 30 weeks. Total losses were £10,019.17, and at least 49 people lost money. The page does not state how much, if any, was recovered by the victims.
Quick check before you read on: is your email in a known data breach? Free, about 30 seconds.
Free · About 30 seconds · No sign-up · Email not stored
The numbers behind the case
Three figures describe the funnel. More than 1,000 texts were sent. From them, he obtained 191 sets of personal details, so a meaningful share of recipients typed their information into the fake pages. Of those, 49 were used for fraud.
The loss per victim averaged roughly £200, which is small enough that many victims might not have reported it. The page does not give this average, and it is our arithmetic from the totals given.
Key facts at a glance
- Sentence: 30 weeks in prison
- Offence period: March 22 to May 9, 2020
- Texts sent: more than 1,000
- Personal details obtained: 191 sets, 49 used for fraud
- Total loss: £10,019.17
- Victims who lost money: at least 49
How to stay safe
1Remember that the government does not text you a refund link
Type the official address yourself.
2Never enter security answers into a form reached from a text
A genuine service would not ask for them this way.
3Check the web address carefully
A lookalike page can use a similar name with a different domain.
4Report scam texts
Forward them to 7726. Our guide on what an exposed phone number means explains why numbers get targeted.
What the page does not say
The page does not say when he was sentenced or how he found the phone numbers. For a later UK case that used equipment to send fake HMRC texts, see the SMS blaster case.
Why this case matters
This was a small-scale operation by a young offender, and yet it caused measurable losses to at least 49 people. It shows that phishing does not require infrastructure. A phone, a list of numbers and a copied website can be enough.
The choice of theme is also instructive. During a period of uncertainty about government help, a message about a refund felt plausible. Scammers use news cycles, and a real event gives a fake message extra credibility. The best defense is a fixed habit: never act on a refund message through a link, whatever the news says, and always check the offer through the official government website you open yourself.
To turn the lesson into action, our guides explain how to tell a real breach notice from a phishing message, how credential stuffing works and what to do after your email appears in a breach. You can also try our free email exposure check.
Sources
- Action Fraud: Man jailed for offering fake tax refunds in Covid-19 scam (texts, dates, 191 and 49 details, losses, 30 weeks)
Frequently asked questions
How long was the sentence?
30 weeks in prison, after he pleaded guilty to fraud and possessing articles for use in fraud.
How many people lost money?
At least 49, with total losses of £10,019.17, according to the service.
What details did the fake page ask for?
Name, address, card security number, mother's maiden name and passwords.
Does the government text refund links?
No. Treat any text that offers a refund and asks you to click a link as suspicious and go to the official site yourself.
See if your email has already leaked
- Checks your email against known data breaches
- Shows which sites leaked it, when, and what leaked
- We do not store the email you check
Compare data removal services
See which services work in your country, what they cost, and the free do-it-yourself route.
Compare removal services →Prefer a one-time report first? Scan My Shadow, our sister service, $9.99.