British tax payers struck by phishing scam

Filed Under: Phishing, Spam

Metro newspaper

British newspapers are warning their readers of a phishing scam that has been spread via spam email, telling recipients that they have been awarded a tax refund from the HMRC (Her Majesty's Revenue and Customs).

The phishing attacks have been seen arriving from faked addresses such as refundtax@hmrc.gov.co.uk or taxrefund@hmrc.gov.uk, and the fact that it is being seen so much now is no surprise. January 31st is the deadline for self-assessment forms to be filed with the HMRC, and some taxpayers will be hoping for a rebate.

Of course, for many people it's a dream come to true to think that they might actually be getting some money back from the tax man rather than having to give money to the Inland Revenue, so it's not surprising if people might eagerly click on the link without thinking of the possible consequences.

The HMRC has warned the British public of the threat, and posted information on its website. They emphasise that while they might send tax payers emails from time to time, they would never do so requesting login, bank or credit cards details.

Furthermore, the HMRC says it would always inform tax payers of rebates via post - and not by email.

HMRC phishing email

What's that old saying? In this world nothing can be said to be certain, except death and taxes? Maybe they should add a third certainty: phishing.

, ,

About the author

Graham Cluley has worked in the computer security industry for more than 20 years, developing anti-virus software and doing quite a lot of talking about internet threats. He's won awards for his blogging, but is proudest of the text adventure games he wrote when he was still wearing short trousers. You can learn more about those (the games, not the trousers) at grahamcluley.com. Send Graham an email, subscribe to his updates on Facebook, follow him on Twitter and App.net, and circle him on Google Plus for regular updates.