Here in New Zealand, fraudsters are getting smarter — and every year, more Kiwis get caught out. Around tax time especially, scammers pretend to be from Inland Revenue (IR), using messages that look legitimate but are actually designed to trick you into handing over money or personal info.
We’ve seen just how convincing these scams can be. They’re polished, professional-looking, and often arrive when you’re already expecting to hear from IR. That’s why it’s so important we all know the warning signs.
What These Scams Look Like
These tactics are evolving fast. Some of the most common ones include:
Refund bait: “Click here to claim your tax refund.”
Debt scare tactics: Texts/Emails saying you owe overdue tax and must pay immediately.
Fake calls: Someone pretending to be IR staff, demanding payment via gift cards, crypto, or prepaid cards.
Lookalike login pages: Fake myIR sites built to steal your password.
And the latest twist? QR codes in scam messages that lead straight to fraudulent websites. These pages often look almost identical to the real IR site.
Why People Fall for It
Fraudsters are strategic — they target people when they’re stressed, busy, or unfamiliar with the system. Groups often hit hardest include:
Self-employed folks juggling multiple jobs
Migrants still learning how IR communicates
Students relying on StudyLink payments
Older adults who aren’t as confident online
But let’s be real — even experienced professionals are getting caught. These scams are tailored to be convincing.
How to Protect Yourself (and Each Other)
Here’s a simple 3-step defence plan we can all use:
1. Pause before acting
If you get a message demanding payment or login, don’t rush. IR will never pressure you with threats or impossible deadlines. Trust your gut — if it feels off, it probably is.
2. Double-check the source
Remember, IR will never:
Ask for passwords, bank details, or PINs by email/text
Send login/payment links in messages
Request payment in gift cards, crypto, or anything unusual
Instead, always login via MYIR directly into your browser. Or call IR yourself on 0800 227 774.
3. Report it
Forward dodgy emails to phishing@ird.govt.nz
Screenshot suspicious texts and submit them via IR’s scam tool
Let your accountant know so we can help double-check things
When you report a scam, you’re not just protecting yourself — you’re protecting our wider community.
How IR Actually Gets in Touch
Legitimate IR communications may come by email or text, but they will:
Ask you to log into myIR on your own — no links
Use professional, consistent wording
Include your name or customer ID (not “Dear customer” or your email address)
They’ll never ask for payments on social media, or aggressively demand action. If that happens? Hang up, delete, and call IR directly.
Red Flags 🚩
Poor spelling or grammar
Messages demanding you “verify now”
Threats of arrest, suspension, or “last chances”
Links that don’t end in ird.govt.nz
Requests for payment in untraceable ways
If You Think You’ve Been Scammed
Act quickly:
Log into myIR and change your password.
Call your bank immediately.
Contact IR or your accountant for guidance.
Report the incident to CERT NZ at www.cert.govt.nz.
The sooner you act, the more damage you can prevent.
Final Word from Us at McCallum + Dallas
Tax scams are not just a personal inconvenience, they’re part of a growing wave of global cybercrime. By staying informed and cautious, you can help stop fraudsters in their tracks.
If in doubt: don’t click, don’t pay, don’t share.
Pause, verify independently, and report anything that feels wrong is the best way to shut fraudsters out.
Together, we can protect not just ourselves, but our whole community.
