HMRC related scam examples
Notice of Underreported Income – 12 October 2009
An email from no-reply@hmrc.gov.uk entitled Notice of Underreported Income is currently being circulated. The email links to a fake HMRC website entitled ‘Fraud Application’ and asks that you download and review a tax statement document. The website then opens an executable file on your machine.
The email is not from HMRC. You should be aware that opening executable files (.exe) over the internet can potentially compromise the security on your machine.
HMRC do not issue emails asking for personal details.
Do not visit the website contained within the email or disclose any personal or payment information.
If you receive an email requesting such information, please forward it to phishing@hmrc.gsi.gov.uk and then delete it.
National Insurance Contributions email – 7 October 2009
An email is in circulation entitled National Insurance Contributions, stating that a payment has not been made. The email contains a link to a fraudulent website that requests the disclosure of payment/personal details. The email is not from HMRC.
Tax rebate - updated 30 September 2009
HM Revenue & Customs (HMRC) would not inform customers of a tax rebate via email, or invite them to complete an online form to receive a rebate of tax.
Do not visit the website contained within the email or disclose any personal or payment information.
Email addresses used to distribute the tax rebate emails include:
- tax-inform@hmrc-information.co.uk
- tax-individuals@hm-treasury.co.uk
- online@hmrc.online-advantage.co.uk
- office.tax@hmrc.taxreturn.co.uk
- customers@hmrc.gov.uk
- help.desk@hmrc.notify-online.co.uk
- online.notify@hmrc-customs.co.uk
- hmrchelpdesk@hrmchelpdesk.co.uk
- securemail@hmrc.gov.uk
- tax-refund@hmrcforms.co.uk
- hmrc@tax-revenue.uk
- refundsdept@hmrc.gov.uk
- hmrc@tax-revenue.uk
- refunds@hmrc.gov.uk
- taxcredits@hmrc.co.uk
- service@hmrc.gsi.gov.uk
- officer.robinson@hmrc.co.uk
HMRC does not send out emails using these email addresses.
An example of the tax rebate scam:
Example 1 (PDF 22K) (added 21 August 2009)
Example 2(PDF 43K) (added 6 July 2009)
Example 3(PDF 211K) (added 7 January 2009)
Update from HM Revenue & Customs' email - 6 July 2009
HMRC has received reports of emails being sent asking recipients to 'update your account to the new EV SSL certification'. This is a scam email attempting to steal User IDs and passwords.
The email is being sent from info@hmrc.gov.uk.
An example can be seen here (PDF 21K)
You should never disclose personal information such as User IDs or Passwords.
Approval of funds scam email - 19 June 2009
An email is being issued displaying the email address postmaster@hmrc.co.uk with the subject 'You are a winner of 168,240.00 GBP'. The email features an attachment and requests that personal details are recorded on the attachment and forwarded to info@lloydstsbprize.com.
HM Treasury Tax Rebate - 11 February 2009
There are currently emails in circulation offering tax rebates from HM Treasury. These are not official emails and should not be acted upon. Notifications to tax rebates are NOT issued by email, and are not paid by HM Treasury.
'Online Update' email - 19 January 2009
HMRC has received reports of emails being sent asking recipients to 'update your account to the new EV SSL certification'. This is a scam email attempting to steal User IDs and passwords.
The email is being sent from Onlineservices@HMRevenueCustoms.org.
An example can be seen here (PDF 22K)
You should never disclose personal information such as User IDs or Passwords.
If you receive an email requesting such information and are unsure of its authenticity, please forward it to phishing@hmrc.gsi.gov.uk or consult this page for further information.
HMRC Impersonation Phone Calls - 7 August 2008
HMRC has been informed of individuals contacting members of the public by telephone to demand 'customs payments' on impounded parcels, and 'VAT payments' on business activity unknown to the call recipient.
HMRC would not contact you by telephone, email or use external companies in these circumstances.
If you are asked to give any payment or personal details over the telephone you should always check with HMRC that the caller is a genuine representative of the department.
'Customs Service' email - 25 July 2008
An email is being issued informing the recipient that a parcel has been received for them and is being held en route from France, it then requests that the customer fills out a customs declaration. This is not an official HMRC email. There is an attachment to the email. Attachments can contain viruses and should not be opened.
If you have received an email such as this, please be aware that HMRC do not pursue money in this way. Please forward the email to us at phishing@hmrc.gsi.gov.uk.
Rebate phone calls - updated 4 December 2007
HMRC has started to receive telephone calls from concerned members of the public who have been contacted by external companies who claim that they may be entitled to a tax or child benefit rebate. The caller offers the rebate in exchange for personal details and bank account information.
HMRC would advise you in writing if you were due a rebate, and would not contact you by telephone, email or use external companies in these circumstances.
If you are asked to give any personal details over the telephone you should always check with HMRC that the caller is a genuine representative of the department.
Tax payments on lottery winnings (Stop Order Fraud) - updated 19 September 2007
A number of frauds state that a parcel containing a cheque in respect of lottery winnings has been impounded by HMRC. It will only be released when a substantial tax sum is paid, which will form a percentage of the winnings. This is a fraud.
An example of the Stop Order fraud (PDF 92K).
Fake TFT Tax Payment Form - 19 July 2007
A fake TFT Tax Payment Form (PDF 147K) (also available in text only version (TXT 2K) is being sent requesting a cheque for an underpayment of tax. This form does not exist within HMRC, and no monies should be sent.
Previous phishing scams
The following are phishing attempts that you need to be aware of. Each of these has been reported to HMRC previously.
- Anti-Terrorist Certificate - this is a scam involving postal items supposedly being stopped by Customs that require the purchase of an Anti-Terrorist Certificate before being released. There is no such certificate in existence within HMRC.
- Child Benefit and Income Support - unsolicited emails are being issued advising the recipient may be entitled to Child Benefit. A non-departmental email address and mobile numbers are being used as the contact points for this scam. An example of the Child Benefit and Income Support scam (PDF 26K).
- Compensation - this scam is aimed at people who supposedly have already been the subject of a fraud attempt. The email requests personal details on the pretext that compensation will be paid. An example of the compensation scam (PDF 32K).
- Export Clearance Process (Delivery Stop Order) - a number of frauds state that a parcel containing a cheque in respect of lottery winnings, or a legacy left in a will, has been held up by Customs at an airport or dock and requires payment of a percentage of the winnings. This will be a fraud. An example of the Export Clearance Process (Delivery Stop Order) (PDF 92K).
- Fake P86 form - letters are being sent with fake P86 Forms, which ask for personal information from taxpayers employed outside the UK. These forms are fake and should not be completed. Further details can be found at Fraud attempt - Fake P86 Form.
- Telephone variations - a new variant of the scam Export Clearance Process (Delivery Stop Order) is that the individual may be contacted by telephone rather than email. HMRC has seen examples where customers are contacted by someone purporting to be from HMRC, claiming that for a payment of £400 by wire transfer, they would release goods to them worth £250,000. Please note: HMRC does not contact customers in this way. One telephone number used in this fraud is Tel 0207 099 2114.
