Guidance to help you avoid scams and keep your private information safe when dealing with the Welsh Revenue Authority (WRA).

Avoid and report internet scams and phishing

Do not give out private information (such as bank details or passwords), reply to text messages, download attachments or click on any links in emails if you’re not sure they’re genuine. We will never ask you for your password by email or phone.

Report misleading websites, emails, phone numbers, phone calls or text messages you think may be suspicious. If you are in any doubt you can email us at security@wra.gov.wales.

Misleading websites, emails and phone numbers

Some websites, emails or phone numbers can look like they’re part of an official government service or that they provide more help than they actually do.

Search on the WRA website to find the information you need. Do not click on any links in emails if you do not think they are genuine.

It will help our investigations if you report all ‘WRA related’ phishing emails and bogus text messages to us. Even if you receive the same or similar phishing email or text message on multiple occasions, please forward it to email security@wra.gov.wales and then delete it.

If it looks suspicious, do not open any attachments or click on any links within the email or text message, as they may contain malicious software or direct you to a bogus website.

How we will communicate with you

The WRA will communicate with you by your chosen method. During registration and the processing of tax returns the WRA may send you information. This includes emails with links to relevant guidance about what you need to do next. Always check to see that the link starts with www.gov.wales/wra and cut and paste this into your internet browser, do not click on it directly.

The WRA will never request bank details or financial information via email.

Tax refund and rebate scams

We’ll never ask you to disclose payment information by email. If you receive an email telling you that you have received a rebate, do not visit the website within the email or disclose any personal or payment information.

We may occasionally issue text messages, however these messages will never request personal or financial information. If you receive a text message claiming to be from WRA offering a ‘tax refund’ in exchange for personal or financial details you should not respond. Don’t open any links contained within the message.

Fraudsters may sign off such scams using the name of a genuine WRA member of staff in an attempt to make the scam appear genuine. If you’re in any doubt, please forward the email to WRA for verification to email security@wra.gov.wales.

Payment information

We will never call you to request bank account information for a rebate. If you receive a call asking you to provide bank details take down the callers information and contact us.