Understanding the Growing Threat of HMRC Phishing Scams
In recent months, a wave of phishing emails has been circulating, claiming to be from GOV.UK VAT Verification and informing recipients that their VAT return has been selected for review. These fraudulent emails are designed to deceive businesses into revealing sensitive information or clicking malicious links. HMRC is aware of these scams and has issued clear guidance on how to identify and report them.
Many businesses and individuals may find it challenging to distinguish between a legitimate HMRC communication and a phishing attempt. However, there are certain telltale signs that can help you verify whether an email is genuine or a scam. This is particularly important during tax season, as scammers take advantage of increased communication with HMRC, making “HMRC scam tax season” a critical keyword to keep in mind when researching these threats.
How to Recognise a Fake HMRC Email
One of the most common methods used by fraudsters is email spoofing, where they disguise their messages to appear as if they are coming from an official HMRC source. These emails often contain urgent language, warning recipients that their tax return is under investigation or that they are eligible for a tax rebate. This type of HMRC scam during tax season is increasingly prevalent.
A key step in verifying the legitimacy of any email is to check the sender’s email address. Genuine HMRC emails will always come from a domain ending in @hmrc.gov.uk. If the email originates from a different domain, such as a generic Gmail or Outlook address, it is almost certainly fraudulent.
Scam emails typically contain hyperlinks that lead to fake websites designed to steal personal and financial information. If you receive an unexpected email from HMRC, do not click on any links or download attachments. Instead, forward the email to phishing@hmrc.gov.uk and delete it from your inbox. Protecting your business from an “HMRC scam tax season” attack requires diligence and attention to these details.
Text Message Scams and Fake SMS from HMRC
Fraudsters are not limited to email scams; they also use text messages (a method known as “smishing”) to target individuals. In these scams, victims receive SMS messages claiming that HMRC requires urgent action, often suggesting that the recipient is owed a tax refund or must pay an outstanding tax bill. This tactic is commonly observed during the HMRC scam tax season when people are more likely to respond.
While HMRC does send text messages for informational purposes, it will never request personal or financial details via SMS. If you receive a message asking for sensitive information or containing a suspicious link, you should report it by forwarding the text to 60599 and then deleting it.
Fraudulent Phone Calls Impersonating HMRC
Another tactic used by scammers involves making phone calls to unsuspecting individuals, pretending to be HMRC representatives. In some cases, these calls are automated messages informing the recipient that HMRC is taking legal action against them and instructing them to press a number to speak to a “caseworker.” These calls tend to spike during HMRC scam tax season.
Other variations of the scam involve fraudsters pretending to be tax officers investigating National Insurance number fraud. They may use aggressive tactics, threatening immediate legal consequences if the recipient does not comply.
If you receive such a call, it is best to hang up immediately. HMRC does not contact taxpayers via automated calls demanding immediate payments. If you are ever unsure about a phone call, you can report it using HMRC’s suspicious phone call reporting form.
The Growing Threat of Social Media Scams
With the increasing use of social media, scammers have found new ways to impersonate HMRC. Fraudulent accounts on platforms like X (formerly Twitter), Facebook, and Instagram have been discovered sending direct messages claiming to offer tax refunds. These scams often coincide with HMRC scam tax season.
These messages may appear convincing, but it is important to remember that HMRC does not use social media to communicate tax rebate offers or request personal details. If you encounter such messages, report them to security.custcon@hmrc.gov.uk and ignore them.
Misleading Refund Companies and Unnecessary Fees
In addition to direct scams, some third-party companies claim to help individuals claim tax refunds, charging unnecessary fees for services that HMRC provides free of charge. While some of these companies operate legally, they often obscure important details in the fine print, resulting in unexpected deductions from a taxpayer’s refund.
Before using any service that claims to assist with tax rebates, it is advisable to verify the legitimacy of the company and carefully review any agreements. If you have any doubts, it is always best to consult directly with HMRC or a trusted tax advisor.
Seeking direction or exploring opportunities?
Contact us by using the form below.
QR Code Scams and Fake HMRC Websites
Another emerging scam involves the use of fake QR codes in emails or letters that appear to be from HMRC. While HMRC does use QR codes in official communications, they will only direct users to government websites ending in gov.uk. These scams are often more prevalent during HMRC scam tax season.
Fraudulent QR codes may redirect victims to convincing but fake websites designed to steal login credentials or financial details. If you receive an email or letter containing a QR code that seems suspicious, do not scan it. Instead, report the incident to phishing@hmrc.gov.uk.
COVID-19 and Customs Duty Scams
The COVID-19 pandemic created new opportunities for scammers, who sent messages claiming that individuals were entitled to tax refunds related to pandemic relief measures. These emails and texts often provided a link where victims were instructed to enter their financial details.
Similarly, some fraudsters have been sending messages stating that the recipient must pay customs duty on an international parcel that does not exist. These scams attempt to exploit confusion around post-Brexit customs regulations. The HMRC scam tax season phenomenon has seen a rise in these types of deceptive practices.
If you receive any such message, do not engage with it. Instead, report it to HMRC’s phishing and scams team.
How to Stay Protected Against HMRC Scams
To protect yourself and your business from HMRC-related scams, it is essential to follow a few best practices. Always verify the authenticity of emails, text messages, or phone calls before taking any action. If an email claims to be from HMRC but does not come from a @hmrc.gov.uk address, it is likely fraudulent.
Never share personal or financial details in response to an unsolicited request, whether through email, text, or phone. HMRC will never ask for such information outside of its secure online services.
If you ever receive a suspicious message claiming to be from HMRC, the safest course of action is to report it immediately and avoid clicking any links or opening attachments. Be particularly vigilant during HMRC scam tax season.
What to Do If You Fall Victim to an HMRC Scam
If you suspect that you have been scammed, take action as quickly as possible. Contact your bank immediately to report the incident and prevent any unauthorized transactions. If financial loss has occurred, you should also report the scam to Action Fraud, the UK’s national fraud and cybercrime reporting service.
Additionally, forward any phishing emails or text messages to phishing@hmrc.gov.uk so that HMRC can investigate and take action against the scammers.
Final Thoughts: Protecting Yourself and Your Business
With phishing scams becoming more sophisticated, it is crucial for businesses and individuals to stay informed and vigilant. HMRC will never request sensitive information through unexpected emails, texts, or social media messages. If you ever receive a suspicious communication, err on the side of caution—do not respond, do not click on links, and report it immediately.
For professional guidance on tax matters and compliance, WellTax is here to help. If you need support verifying HMRC communications or ensuring your business remains secure, contact us today.
Stay safe, stay informed, and protect your financial well-being from potential fraud. Remember: during HMRC scam tax season, these types of scams become even more frequent, so stay extra vigilant.
