Popping up an unexpected notification from HMRC can be concerning, especially when it shows that you have an unpaid tax bill or you are due a tax refund. However, not every message that appears on your device from HMRC is genuine.
What if it is a SCAM?
Tax scams are becoming increasingly convincing. Fraudsters may impersonate HM Revenue & Customs (HMRC) and contact taxpayers through emails, text messages, phone calls, letters, websites or social media. Their objective can be to obtain personal information, payment details or persuade people to transfer money. HMRC warns that a communication could be a scam if it is unexpected, rushes you, threatens you, asks for personal information such as bank details, tells you to transfer money, or offers an unexpected refund, tax refund or grant.
“Note: Those who are new to the term HMRC:- HMRC(His Majesty’s Revenue and Customs) is the UK government authority which is responsible for administrating the country’s tax,payments and customs system.It includes responsibilities like collecting taxes and National Insurance,providing certain financial support to individuals,families,and managing customs-related matters.”
Phishing Emails
Phishing emails are designed to mimic legitimate organizations. In HMRC scams, you may be asked to claim a refund, update your details, confirm your identity, or make a payment. These emails can appear highly professional, featuring official logos and links, but their appearance does not guarantee they are authentic.
How phishing works: Scammers create convincing messages that direct you to fraudulent websites or seek sensitive information.
How to protect yourself: Do not click on unexpected links or provide information in response to suspicious emails. Always verify communications using HMRC’s official guidance. Stay alert and informed to safeguard yourself against scams.
Voice Phishing (Vishing)
Voice phishing, or vishing, involves scammers pretending to be HMRC representatives over the phone. They may claim that you have an outstanding tax payment, are entitled to a refund, or need to confirm your identity or financial details. Scammers may use urgent or threatening language to pressure you into acting immediately.
How voice phishing works: Scammers use phone calls to create a sense of urgency and persuade you to disclose personal, banking, or security information or make a payment.
How to protect yourself: Never share passwords, PINs, security codes, or banking details during an unexpected call. If you are unsure, end the call and contact HMRC through its official channels. Do not rely on the caller ID alone to verify a caller’s identity.
QR Code Phishing
QR code phishing, also known as quishing, uses fraudulent QR codes to direct you to fake websites. HMRC sometimes includes genuine QR codes on their letters, and when we scan them, these codes take you to relevant GOV.UK guidance or information pages. Genuine HMRC QR codes will never take you to pages where you are asked to give personal information. But in HMRC scams, a QR code may be included in an email, text message, letter, or online message and may claim to help you access a tax refund, make a payment, or verify your details.
How QR code phishing works: Scammers create QR codes that lead to fraudulent websites designed to steal personal, financial, or login information. A QR code may look harmless, but the website it opens may not be legitimate.
How to protect yourself: Avoid scanning unexpected QR codes related to tax refunds, payments, or account verification. Check the website address carefully before entering any information, and access HMRC services directly through its official website rather than through a QR code.
Fake Text Messages
Fake HMRC text messages are designed to appear as though they have been sent by HMRC. They may claim that you are eligible for a tax refund, have an outstanding payment, or need to verify your information. These messages often contain links and may use urgent language to encourage you to act quickly.
How fake text messages work: Scammers send convincing SMS messages containing links to fraudulent websites or requesting personal and financial information. The message may appear genuine, but its wording, links, or requests can reveal that it is a scam.
How to protect yourself: Do not click on links or reply to unexpected messages claiming to be from HMRC. Avoid providing personal or financial information through text messages. Instead, verify any tax-related information through HMRC’s official channels.
Fake HMRC Websites
Fake HMRC websites are created to resemble legitimate government websites closely. They may use HMRC branding, logos, official-looking language, and similar web addresses to appear genuine. Scammers may use these websites to collect personal information, login credentials, or payment details.
How fake HMRC websites work: Victims are directed to fraudulent websites through emails, text messages, search results, QR codes, or other online platforms. Once on the site, they may be asked to enter sensitive information or make a payment.
How to protect yourself: Check the website address carefully before entering any information. Do not assume a website is genuine simply because it contains HMRC logos or government-style branding. Access HMRC services directly through its official website and avoid using links provided in unexpected messages.
Our Final thought on HMRC scams
Stay alert, think before you click, and always verify the information. HMRC scams are becoming increasingly convincing, but a few simple precautions can help protect your money and personal information. Never rush into making payments or sharing sensitive details in response to an unexpected message or phone call.
If you’re unsure whether it’s an HMRC scam or a genuine notification, please verify it through the official GOV.UK channel. Or you can also seek advice from our accounting professionals at Shreem Accountants.
