Search

HMRC issues tax scam warning to self-assessment taxpayers

HMRC has released a fraud warning urging all self-assessment taxpayers to watch out for fake tax communications ahead of the tax return deadline on January 31, 2022.


The tax authority recently issued more than 4m text messages and emails, urging self-assessors who are yet to file their 2020-21 tax return to get organised - something fraudsters are likely to take advantage of.


HMRC said it received 800,000 reports of tax-related scams in the past year alone - with many more likely to have gone unreported.


As HMRC is likely to be contacting people more frequently between now and the end of the month, here’s how to avoid the fraudsters.


HMRC scams to watch out for


Over the past 12 months, HMRC says it’s responded to 797,010 referrals of suspicious contact from members of the public. Of these, almost 360,000 were offers of fake tax rebates.


Scammers will commonly text or email people to say they’re owed a tax rebate from HMRC, often with a link that asks the person to fill out their personal details in order to claim it.


This is usually a way to obtain people’s personal details to use in other scams. Phone scams are on the rise, too. The past year has seen a 21% rise on the previous 12 months, with HMRC receiving more than 327,000 reports of suspicious phone calls.


There has been numerous reports of automated phone calls telling people they owe tax and that HMRC has issued a warrant for their arrest - unless they pay the tax they owe. Of course, anyone who does make a payment will be being the scammer, not HMRC.


Malicious web pages are another issue. Over the same period of time, HMRC reported 8,561 malicious web pages to be taken down - some of which will have been copycat HMRC websites. Again, these are set up to gain your personal information and/or encourage you to make a payment to the scammers.



How to protect yourself from tax scams


HMRC has a dedicated cyber crime team working to shut down scams - but new ones are appearing all the time, so it’s important to remain vigilant. Before you give out your personal details or make a payment, consider these points:


  • Were you expecting to be contacted? If you know you’re due to submit a tax return, you’ll probably expect a reminder from HMRC at some point during this time of year. But if the contact you’ve had is completely unexpected, it’s worth digging into whether it’s really HMRC that’s contacting you.

  • Are you being rushed? If a phone call or other communication says you must make an urgent money transfer, or provide personal information right now, you should be on your guard.

  • Have you been threatened with an arrest? This is a particularly scary one and usually comes in the form of an automated message informing you that you risk prosecution if you don’t pay up. HMRC will never call you and threaten arrest; while the most serious cases of tax fraud and evasion can result in prison terms, it won’t just be the result of a phone call out of the blue.

  • Does it seem too good to be true? Receiving news of a tax rebate you weren’t expecting can be exciting, but before you go any further with the process of claiming it, ask yourself if it’s likely to be real.

  • Have you double-checked the website or email address? One of the most effective ways of checking whether you’re being scammed is scrutinising the website you’ve been sent to, or the email address you’ve been contacted by. Some of the most sophisticated scams have official-looking details, but the vast majority don’t and just work on the assumption that no one will check.


If you’re unsure about whether someone contacting you is genuinely from HMRC, it may be worth holding off taking any action until you’ve checked your personal tax account online to see if you’ve received any communications there. If that’s not clear, you can call HMRC directly.


If you’ve received any communication that you think might be a scam, it’s best to report it to HMRC as quickly as possible so it can be investigated. Suspicious phone calls can be reported using its online form; phishing emails can be forwarded to phishing@hmrc.gov.uk; scam texts can be sent on to 60599. Find out more: spot and protect yourself from scams


What to do if you’ve been scammed


Fraud is becoming more common, and more sophisticated, than ever, and even the most vigilant people can still fall victim to scams. If a fraudster has convinced you to transfer money to their account, or tricked you into giving up your bank details so they can make the transfers themselves, this is bank transfer fraud - also known as authorised push payment (APP) fraud.


If your bank is signed up to the voluntary Authorised Push Payment Scam Code, it has to take a number of steps to protect customers and reimburse those who aren’t to blame for the financial loss.


To improve on the current process, the Treasury has recently committed to make legislative changes that will make it mandatory for banks to reimburse scam victims. You should also alert the authorities by contacting Action Fraud.



 

Reporting

Report all Fraud and Cybercrime to Action Fraud by calling 0300 123 2040 or online. Forward suspicious emails to report@phishing.gov.uk. Report SMS scams by forwarding the original message to 7726 (spells SPAM on the keypad).

 

The contents of blog posts on this website are provided for general information only and are not intended to replace specific professional advice relevant to your situation. The intention of East Midlands Cyber Resilience Centre (EMCRC) is to encourage cyber resilience by raising issues and disseminating information on the experiences and initiatives of others. Articles on the website cannot by their nature be comprehensive and may not reflect most recent legislation, practice, or application to your circumstances. EMCRC provides affordable services and Trusted Partners if you need specific support. For specific questions please contact us by email.

 

EMCRC does not accept any responsibility for any loss which may arise from reliance on information or materials published on this blog. EMCRC is not responsible for the content of external internet sites that link to this site or which are linked from it.