Protecting Your Tax and Government Account Logins
Tax, benefits, pension and ID portals hold valuable information and are targeted by criminals. How to secure your government account logins, spot fake portals, and recover if something goes wrong.
Tax, benefits, pension, health and national ID portals hold some of your most sensitive information, and they can control money: refunds, benefits and pension payments. Criminals target these logins to redirect payments or commit tax fraud. They also build fake portals to steal logins. A few steps keep your government accounts safe.
Secure the login
- Use a unique, strong password, stored in a password manager.
- Turn on the strongest sign-in option offered: authenticator app, national digital ID app, passkey, or text codes as a minimum.
- Keep recovery details current: phone, email and postal address.
- Secure the email linked to the account. See securing your email.
Only use the real portal
- Type the address yourself, or start from your country's main government website.
- Avoid search adverts and links in texts or emails.
- Check the address uses your country's official government domain.
- Be wary of third-party sites that charge fees for free government services.
"Tax refund" and "benefit update" messages with links are among the most common phishing attacks. Log in to the portal yourself instead. See tax impersonation scams.
Watch for signs of misuse
- Changed bank details or address you did not make.
- Refunds or payments you did not receive.
- Letters about returns, claims or registrations you did not submit.
- Sign-in alerts you did not expect.
See tax refund and benefit fraud using your identity.
If something goes wrong
- Contact the agency through its official phone number or website.
- Change your password and turn on two-step verification.
- Check and correct bank details and address.
- Report identity theft where relevant. See reporting identity theft.
Got a message from a "government agency"? Paste it into CyberWatch AI Scan for a free check.
For more, read about protecting your identity in our complete guide.
Frequently asked questions
Why would criminals want my tax or benefits login?
To redirect refunds or benefit payments, change your bank details, access personal information, or commit tax identity fraud.
How do I find the real government portal?
Type the official address yourself or follow links from your country's main government website. Avoid adverts and links in messages.
Do government portals support two-step verification?
Many do, often with text codes, authenticator apps or national digital ID apps. Turn on the strongest option offered.
Sources
- How To Avoid a Government Impersonation Scam, US Federal Trade Commission
- What To Know About Tax Identity Theft, US Federal Trade Commission
- Top tips for staying secure online, UK National Cyber Security Centre
