Report HMRC phishing emails, texts, phone call scams
You’ll never get an email, text message, message in an application (for example WhatsApp) or a phone call from HM Revenue and Customs (HMRC) which tells you about a tax rebate or penalty or asks for your personal or payment information. Report HMRC phishing emails, texts, phone call scams.
Check HMRC’s guidance on recognising scams if you’re not sure.
Email scams
HMRC is aware of a phishing campaign telling customers they can claim a tax refund to help protect themselves from the coronavirus outbreak.
Do not reply to the email and do not open any links in the message.
The email has been issued in various formats.
Email addresses
HMRC will never send notifications by email about tax rebates or refunds.
Do not:
- visit the website
- open any attachments
- disclose any personal or payment information
Fraudsters may spoof a genuine email address or change the ‘display name’ to make it appear genuine. If you are unsure, forward it to us and then delete it.
SMS scams
‘Goodwill payment’ SMS
HMRC is aware of coronavirus SMS scams telling customers they can claim a ‘goodwill payment’. Do not reply to the SMS and do not open any links in the message.
This is an example of the scam wording:
‘As Part of the NHS promise to battle the COV- 19virus, HMRC has issued a payment of £258 as a goodwill payment. Follow link to apply.’.
‘£250 fine’ SMS
HMRC is aware of a SMS scam which states you will be fined £250 for leaving the house more than once. The message asks recipients to call an 0800 telephone number to appeal.
Do not reply to the SMS or call the phone number listed.
Text messages
HMRC will never ask for personal or financial information when we send text messages.
Do not reply if you get a text message claiming to be from HMRC offering you a tax refund in exchange for personal or financial details. Do not open any links in the message.
Send any phishing text messages to 60599 (network charges apply) or email phishing@hmrc.gov.uk then delete it.
Bogus phone calls
HMRC is aware of an automated phone call scam which will tell you HMRC is filing a lawsuit against you, and to press one to speak to a caseworker to make a payment. We can confirm this is a scam and you should end the call immediately.
This scam has been widely reported and often targets elderly and vulnerable people.
Other scam calls may offer a tax refund and request you to provide your bank or credit card information. If you cannot verify the identity of the caller, we recommend that you do not speak to them.
If you’ve been a victim of the scam and suffered financial loss, report it to Action Fraud.
The calls use a variety of phone numbers. To help our investigations you should report full details of the scam by email to: phishing@hmrc.gov.uk, including the:
- date of the call
- phone number used
- content of the call
WhatsApp messages
HMRC will never use ‘WhatsApp’ to contact customers about a tax refund. If you receive any communication through ‘WhatsApp’ saying it’s from HMRC, it is a scam. Email details of the message to phishing@hmrc.gov.uk then delete it.
Social media scams
HMRC is aware of direct messages sent to customers through social media.
A recent scam was identified on Twitter offering a tax refund.
These messages are not from genuine HMRC social media accounts and are a scam. We never use social media to:
- offer a tax rebate
- request personal or financial information
If you cannot verify the identify of the social media account, send the details by email to: phishing@hmrc.gov.uk and ignore it.
Reporting suspicious HMRC phishing emails, texts, phone call scams
You can report something suspicious to HMRC’s phishing team, for example:
- a text message (forward it to 60599 – you’ll be charged at your network rate)
- a message in an application, for example WhatsApp – take a screenshot and forward as an email
- an email
- details of a phone call asking for personal information or threatening a lawsuit
If you receive a suspicious phone call, you can help HMRC’s investigations by providing:
- your phone number
- the caller’s phone number
- the time and date of the call
- a brief description of the call
HMRC phishing team
phishing@hmrc.gov.uk
Your email address and phone number will be shared with other organisations if that’s necessary to close down the scam.
Reporting a disclosure of personal details
Contact the HMRC security team if you think you’ve given any personal information in reply to a suspicious email or text.
Include brief details of what you disclosed (for example name, address, HMRC User ID, password) but do not give your personal details in the email.
Source:
