British newspapers are warning their readers of a phishing scam that has been spread via spam email, telling recipients that they have been awarded a tax refund from the HMRC (Her Majesty's Revenue and Customs).
The phishing attacks have been seen arriving from faked addresses such as email@example.com or firstname.lastname@example.org, and the fact that it is being seen so much now is no surprise. January 31st is the deadline for self-assessment forms to be filed with the HMRC, and some taxpayers will be hoping for a rebate.
Of course, for many people it's a dream come to true to think that they might actually be getting some money back from the tax man rather than having to give money to the Inland Revenue, so it's not surprising if people might eagerly click on the link without thinking of the possible consequences.
The HMRC has warned the British public of the threat, and posted information on its website. They emphasise that while they might send tax payers emails from time to time, they would never do so requesting login, bank or credit cards details.
Furthermore, the HMRC says it would always inform tax payers of rebates via post - and not by email.
What's that old saying? In this world nothing can be said to be certain, except death and taxes? Maybe they should add a third certainty: phishing.