HMRC issues online scam warning

HMRC is warning of an email phishing scam which puts recipients at risk of identity theft.

A bogus email from no-reply@hmrc.gov.uk with the subject ‘Notice of Underreported Income’ is currently being circulated.

The email includes a link to a fake HMRC website entitled ‘Fraud Application’ and asks the user to download and review a tax statement document. The website then opens a malicious executable file on the user’s machine which secretly steals their identity details.

“The email is not from HMRC. People should be aware that opening files from the internet can potentially compromise their computer’s security,” said Ralph Smith, HMRC’s departmental IT security officer."

“HMRC does not issue emails asking for personal details. Do not visit the website contained within the email or disclose any personal or payment information unless you are sure that your communication is with the right people and is secure.”

The Department’s Security and Business Continuity helpdesk has been flooded with calls in recent days from staff concerned about the scam.

Any email requesting such information should be forwarded to phishing@hmrc.gsi.gov.uk and then deleted.