A set of spam emails from fraudsters purporting to be from HM Revenue and Customs (HMRC) offering a tax rebate are currently doing the rounds.
If you get either of the two scam messages, the advice is simple: do not open them. If you open one by mistake, do not click on the link, open any attachments or disclose any personal details as you risk having your identity stolen.
Many taxpayers may currently be receptive to tax-related messages from seemingly-official bodies because of the upcoming 31 July self assessment tax deadline. HMRC has reported a spike over recent days in the number of calls reporting these emails as suspicious.
The Revenue says it never notifies taxpayers of a rebate via email, nor does it ask them to complete an online form to request money back.
In a statement, it adds: "It is very important anyone receiving it does not reply or provide any personal details whatsoever.
"We are liaising closely with those agencies working to close down and prosecute those behind these scams."
If you have opened the email or attachment, it's useful to do a scan of your computer for trojans or viruses (see the free anti-virus and safety software guide).
Sophisticated fraud
MSE's IT department has analysed the offending emails and says it is one of the more sophisticated spam campaigns recently seen.
The emails have been sent from a California-registered address but that does not necessarily mean it is a fraud originating from the US.
There are two versions of this email that MSE has seen so far.
Version 1: An HTML email with a hidden, dodgy link
With this, you will be asked to click on a link to get a refund. That link takes you to a form to fill out sensitive personal information and credit or debit card details.
If you submit those, you'll be redirected to the Revenue's genuine website but that form will be visible to the fraudsters behind the email.
Version 2: A plain text email, but beware the attachment
Here, you're sent a similar message, but it's in plain text. The link in the email takes you to the genuine HMRC website (even though the web address is not the official .gov.uk address the Revenue usually gives out).
This is an attempt to make the email seem genuine, but the sting comes in the attachment. This is a form which could again allow the scammers to view your private details.
From: HM Revenue & Customs [mailto:refund-application@hmrc.refundform.co.uk] Tax return 2008 - 2009 ATTN: Dear Applicant After the last annual calculation of your fiscal activity we have determined that you are eligible to receive a tax refund of 344.79 GBP Your TRN (TAX REFUND NUMBER): UK52/288194HMRC29/158, complete the tax return form attached to this message. Our head office address can be found on our web site at http://www.hmrc.co.uk/ Note: For security reasons, we recommend that you close your browser after you have finished accessing your refund status. Sincerely, |
Further reading/Key links
Ensure your computer is protected: Free Anti-virus software
Find out how much tax you owe: 2009/10 Tax Breakdown
Revenue advice: tax rebate email warning
News archive: Don't miss the 31 July tax deadline
