Gone phishing – 75,000 fake tax refund emails reported
HM Revenue and Customs (HMRC) is warning taxpayers to be on their guard against fraudulent phishing emails, after almost 75,000 fake emails were reported to the taxman over the last six months.
Some 74,743 scam emails were reported to HMRC’s dedicated phishing email account between April and September – a 70% increase on the same period in 2013. Over the same six-month period, HMRC worked with other law enforcement agencies to help close down more than 4,000 websites responsible for sending out the emails.
The emails promise a tax refund, and often ask for a recipient’s name, address, date of birth, bank and credit card details – including passwords and their mother’s maiden name. Once the victim has provided the information, money is stolen from their bank account and their details are sold on to other criminal gangs, which can lead to identity theft.
Steve Singh, Deputy Head of Operations, HMRC Digital Security, said:
HMRC never contacts customers who are due a tax refund by email – we always send a letter through the post.
If you receive an email which claims to be from HMRC, and which offers you a tax refund, we recommend you send it to phishing@hmrc.gsi.gov.uk and then permanently delete it. We can, and do, close these websites down and we continue our efforts to work with law enforcement agencies around the world to bring down the criminals behind these scams.
HMRC asks people to:
- Check Phishing and scams for its online security advice
- Check to see examples of phishing emails online at Phishing emails and bogus contact: HM Revenue and Customs examples
- Forward suspicious emails to HMRC at phishing@hmrc.gsi.gov.uk and then delete them
- Avoid clicking on websites or links in suspicious emails, or opening attachments.
Further advice can also be found at Get Safe Online