Variations on such emails promise enticing opportunities such as tax refunds, the waiver of penalties, prize fund winnings, corrections to your NI record and updates to your HMRC security details. These emails are designed to fool the most suspicious of recipients and include links to what appear to be genuine pages of HMRC's website. In some cases, once you have been tricked into disclosing personal information you are then redirected to real HMRC web pages.
In theory we could all simply set our computer's spam filter to catch all emails that purport to come from HMRC. But the spammers know that many of us cannot do this. We may have registered to file our tax returns, our VAT and/or our Payroll returns over the web. We need to see the emails that confirm these have been received and processed. And although HMRC's press releases contain good advice they do not contain a simple summary.
So here are my five tips to help you identify scam emails that purport to come from 'HMRC':
- Email asks you to supply bank or credit card details or links you to an HMRC website that asks for this information;
- Email asks you to supply personal or password details or links you to an HMRC website that asks for this information;
- Email asks you to complete a form to receive a tax refund or rebate or links you to an HMRC website that asks you to do this;
- Email asks you to download an application or executable file (.exe) or links you to an HMRC website that asks you to do this;
- Email does not contain your name, was unexpected and does not relate directly and specifically to any details you have filed online with HMRC in the previous 48 hours.
- They never send notifications of a tax rebate over email;
- They never request that you update your security certification by email;
- HMRC's Online Services are only available to customers who register their details in advance;
- They never issue emails asking for personal details;
- If you receive an email requesting such information, please forward it to email@example.com and then delete it;
- Never disclose personal information such as User IDs or Passwords in response to email requests;
- If you do follow a link to HMRC's website that requires you to enter sensitive personal information, only do so if there is a padlock in the bottom right hand corner of your Internet browser when you are on that page;