With anything like that, just remember that any legitimate organisation won't need to ask for information as they'll have it already. If you specify account details on your tax return they can pay any refund directly. otherwise they have your name and address so they can send a cheque.