Watch out for these HMRC tax refund scams

by Simon Ward on 20 February 2013  |  13 comments
Tweet

Scammers regularly send out fake emails supposedly from HMRC promising a tax refund. Here's what to watch out for.

Fraudsters regularly send out thousands of tax refund 'phishing' emails, particularly around the tax deadline times of 31st January and 31st October.

Last year, over 80,000 scam emails were reported to HM Revenue & Customs (HMRC). It says it forced the closure of 522 illegal websites in 2012.

These emails ask you to input your credit card or bank details into an online form, so that the rebate can be paid to you. But if you provide your details, your account will be emptied and your credit cards will be used to their limit, and you may also become a victim of identity fraud.

Don't be caught out. Here's what to look out for.

What the emails look like

While the emails look genuine, complete with HMRC logo and official-style reference numbers, the dubious English ("your fiscal activity") should set alarm bells ringing.

Often, the email addresses look genuine too, often ending in 'hmrc.gov.uk'. Here are some of the reported email addresses used to distribute the tax rebate emails, according to HMRC:

• tax.refunds@hmrc.gov.uk
• attached.form@hmrc.attached.gov.uk
• service@hmrc.gov.uk
• hmrcrefunds@hmrc.gov.uk
• refundsdept@ir-efile.gov.uk
• noreply@hmrk.co.uk
• customers@hmrc.gov.uk
• taxcredits@hmrc.co.uk
• officer.robinson@hmrc.co.uk
• securemail@hmrc.gov.uk
• hmrc@tax-revenue.uk
• srvcss@hmrc.gov.uk

The fake phishing website you click through to can also look genuine, as this example demonstrates.

How you can tell the email is a fake

Simple: HMRC never contacts customers who are due a refund by email. It only ever sends such a letter by post.

So even if the email looks as genuine as this one, it's likely to be a fake.

Similarly, it's worth knowing that HMRC never contacts taxpayers about refunds by telephone, and never uses external companies regarding refunds.

Basically, if it doesn't come in the post from HMRC, it's fake. End of story.

What to do if you receive an email

If you do get an email like this, you should send it to HMRC for investigation before deleting it. Forward all suspicious emails to HMRC at phishing@hmrc.gsi.gov.uk.

And if you have reason to believe you have been the victim of an email scam, report the issue to your bank/card issuer as soon as possible. If in doubt, please check with HMRC at http://www.hmrc.gov.uk/security/fraud-attempts.htm.

Get safe online

Remember, phishing emails are common for all sorts of issues. As a rule of thumb, never click on links contained in suspicious emails or open attachments. You can get more help via the Get Safe Online website or read our top 12 tips to keep you safe online. If you use online banking, you may also want to read Online banking: how to stay safe.

If you spot a scam, email us at news@lovemoney.com or post it on our Q&A pages.

This is a classic lovemoney article that has been updated

More on scams and frauds

Tony Levene's scams blog

How to spot a fake £1 coin

Sneakiest phone scams

Watch out for this eBay scam!