Fake emails, calls and messages suggesting they are from Her Majesty’s Revenue & Customs (HMRC) have grown exponentially in the last five years with many people falling foul to fraudsters. Here, Perrys Chartered Accountants discusses the latest HMRC cyber scams doing the rounds and how to spot bogus communications.

In 2021, HMRC received more than 670,000 calls from individuals reporting tax scams. Despite a significant drop in reports to HMRC in recent months, statistics show that tax-related scams doubled during the pandemic and HMRC is still advising caution of any correspondence – particularly via text or email – implying it is from the tax authority.

Scams can come in many forms. However, the most common tactic used by fraudsters is contacting potential victims via automated messages. So, what should you look out for?

HMRC email scams

Phishing attacks aren’t new, but the tactics employed by fraudsters have become increasingly sophisticated over the years with many able to replicate email addresses from authorities, such as HMRC, that on first glance look bona fide.

These attacks aim to extract personal information and data from an individual that enables fraudsters to steal identities, bank details and more.

One such campaign doing the rounds is an email telling customers that they are eligible to receive an employment income support scheme credit during the COVID-19 pandemic. If you receive such an email, you should not reply to it, click on any links in the email or open any attachments. You should also avoid disclosing any personal or payment information. Instead, report it immediately to HMRC by emailing it to phishing@hmrc.gov.uk.

Fake tax rebates

Another common scam is the offer of a tax rebate either via text or email. HMRC will never contact anyone by text or email about tax rebates, so any messages received offering a refund will certainly be fake. If you receive any such message, do not reply but report it to HMRC and then delete it.

Be wary of website links and malicious web pages

HMRC will never ask you to click on a link to complete your details online to receive a rebate.

Web pages can also be dangerous with many fake sites cloning or copying official pages from HMRC’s website or claiming to be officially affiliated with the tax authority. To avoid being fooled by a fake website, always visit HMRC directly by typing the government’s official URL https://www.gov.uk/ into your browser.

HMRC text scams

HMRC will never ask for any personal or financial information when sending out texts. If you receive such a text, do not reply to it or open any links contained in the message. Instead, you can send any phishing text messages to HMRC using the text number 60599 or by emailing it to phishing@hmrc.gov.uk.

HMRC phone scams

Phone scams are performed using a variety of methods and are often used to target elderly and vulnerable people.

A popular way for fraudsters to target potential victims is by using an automated message. HMRC is aware of a scam which tells the receiver that they are the subject of a lawsuit and to press 1 to speak to a caseworker to make a payment. This is false. If you receive such a call, you should end it immediately.

Other similar scams might refer to National Insurance number fraud or tax refunds and will ask you to supply bank or credit card information. If you are at all unsure, or you cannot verify the caller, hang up and report it to Action Fraud. When reporting phone scams, you should include the date of the call, the phone number used to contact you and what the call was about. You can also contact HMRC directly on its phone number 0300 200 3310 to verify the legitimacy of any calls you receive alleging to be from the authority.

HMRC WhatsApp scams

HMRC will never use WhatsApp to contact customers about a tax refund. If you receive any such communication via WhatsApp saying it is from HMRC, you should report it immediately by emailing HMRC and then delete it.

HMRC social media scams

One of the most recent social media scams being used to con people is the distribution of direct messages via Twitter offering a tax refund. These messages are not genuine and HMRC will never use social media platforms, such as Twitter, Instagram, Facebook and LinkedIn, to offer tax rebates or request personal information. Ignore all such messages and report them to HMRC straight away.

HMRC refund companies

Refund companies that send emails or texts advertising their services and offering to apply for a tax rebate on your behalf in return for a fee are not connected with HMRC in any way. Before using any such service, you should read the company’s terms and conditions or disclaimers and think carefully before instructing them to assist you. If in doubt, contact a professional accountant for advice.

HMRC customs duty scams

Changes officially introduced by HMRC on 1 January 2021 mean that some UK consumers buying goods from EU businesses might need to pay customs charges when their goods are delivered. This change in regulations has resulted in a surge of associated email and text scams asking for customs duty payments.

Customers are contacted via false emails or texts and told they must pay customs duty to receive a valuable parcel which doesn’t exist. If you are not expecting any parcel or if you are in any doubt as to the authenticity of such messages, then do not reply. Instead, you should report any suspicious activity to HMRC immediately by emailing phishing@hmrc.gov.uk.

University students taking part-time jobs

According to HMRC, undergraduates taking part-time jobs are at increased risk of falling victim to scams – particularly if they are new to interacting with the tax authority and unfamiliar with its processes.

Between April and May 2021, more than 5,000 phone scams were reported to HMRC by 18 to 24 year olds. The advice is to be wary if you are contacted out of the blue by someone asking for money or personal information.

Mike Fell, Head of Cyber Security Operations of HMRC, said:

“We see high numbers of fraudsters contacting people claiming to be from HMRC. If in doubt, our advice is – do not reply directly to anything suspicious, but contact HMRC through GOV.UK straight away and search GOV.UK for ‘HMRC scams’.