HMRC issues online scam warning

15 October 2009

HMRC is warning of an email phishing scam which puts recipients at risk of identity theft.
A bogus email from no-reply@hmrc.gov.uk with the subject ‘Notice of Underreported Income’ is currently being circulated.

The email includes a link to a fake HMRC website entitled ‘Fraud Application’ and asks the user to download and review a tax statement document. The website then opens a malicious executable file on the user’s machine which secretly steals their identity details.

“The email is not from HMRC. People should be aware that opening files from the internet can potentially compromise their computer’s security,” said Ralph Smith, HMRC’s departmental IT security officer.

“HMRC does not issue emails asking for personal details. Do not visit the website contained within the email or disclose any personal or payment information unless you are sure that your communication is with the right people and is secure.”

The Department’s Security and Business Continuity helpdesk has been flooded with calls in recent days from staff concerned about the scam.

Any email requesting such information should be forwarded to phishing@hmrc.gsi.gov.uk and then deleted.

And the tale goes on:

Some of you may be aware of the email that appeared on 15th October which purported to come from HMRCand referring to underpayment of tax.
A further email appeared today - example below - offering a refund and with a form to complete with your personal details. Do not respond other than to forward the message to phishing@hmrc.gsi.gov.uk before deleting it.

QUOTE
HM Revenue & Customs
United Kingdom
___________________________________________________________________________ _
Preston
PR1 0SB
United Kingdom

Form CA3821
Tax Refund Amount: 265.24



Dear Applicant,



You are eligible to receive a tax refund of 265.24, after calculation of
your fiscal activity. Your verification form will only be valid only for 24
hours and for verification your details you have the tax file number (TFN):
692553841 (See the tax privacy note in the Taxpayer's declaration on page 8
of your tax refund).

Please complete the individual tax refund 2009, "FORM CA3821" attached to
this confidential message. After completing the form allow us 5-9 business
days in order to process it.

Sincerely,
HM Revenue & Customs
UNQUOTE