© Crown copyright 2020
This publication is licensed under the terms of the Open Government Licence v3.0 except where otherwise stated. To view this licence, visit nationalarchives.gov.uk/doc/open-government-licence/version/3 or write to the Information Policy Team, The National Archives, Kew, London TW9 4DU, or email: email@example.com.
Where we have identified any third party copyright information you will need to obtain permission from the copyright holders concerned.
This publication is available at https://www.gov.uk/government/publications/phishing-and-bogus-emails-hm-revenue-and-customs-examples/phishing-emails-and-bogus-contact-hm-revenue-and-customs-examples
To help our investigations, report all HMRC related phishing emails and bogus text messages to us. Even if you get the same or similar phishing email or text message often, email it to firstname.lastname@example.org and then delete it.
Do not open attachments or click any links in an email or text message, as they may contain malicious software or direct you to a bogus website.
Coronavirus (COVID-19) scams
HMRC is aware of a phishing campaign telling customers they can claim a tax refund to help protect themselves from the coronavirus outbreak.
Do not reply to the email and do not open any links in the message.
The email has been issued in various formats. An example of this scam is below:
‘Goodwill payment’ SMS
HMRC is aware of coronavirus SMS scams telling customers they can claim a ‘goodwill payment’. Do not reply to the SMS and do not open any links in the message.
This is an example of the scam wording:
‘As Part of the NHS promise to battle the COV- 19virus, HMRC has issued a payment of £258 as a goodwill payment. Follow link to apply.’.
‘£250 fine’ SMS
HMRC is aware of a SMS scam which states you will be fined £250 for leaving the house more than once. The message asks recipients to call an 0800 telephone number to appeal.
Do not reply to the SMS or call the phone number listed. An example of the scam is shown below:
Tax refund and rebate scams
HMRC will never send notifications by email about tax rebates or refunds.
- visit the website
- open any attachments
- disclose any personal or payment information
Fraudsters may spoof a genuine email address or change the ‘display name’ to make it appear genuine. If you are unsure, forward it to us and then delete it.
Example of a phishing email and bogus website
An example of a HMRC related phishing email scam is below:
An example of a phishing website designed to trick you into disclosing personal information is below:
HMRC will never ask for personal or financial information when we send text messages.
Do not reply if you get a text message claiming to be from HMRC offering you a tax refund in exchange for personal or financial details. Do not open any links in the message.
Send any phishing text messages to 60599 (network charges apply) or email email@example.com then delete it.
An example of a phishing text message is below:
Bogus phone calls
HMRC is aware of an automated phone call scam which will tell you HMRC is filing a lawsuit against you, and to press one to speak to a caseworker to make a payment. We can confirm this is a scam and you should end the call immediately.
This scam has been widely reported and often targets elderly and vulnerable people.
Other scam calls may offer a tax refund and request you to provide your bank or credit card information. If you cannot verify the identity of the caller, we recommend that you do not speak to them.
If you’ve been a victim of the scam and suffered financial loss, report it to Action Fraud.
The calls use a variety of phone numbers. To help our investigations you should report full details of the scam by email to: firstname.lastname@example.org, including the:
- date of the call
- phone number used
- content of the call
HMRC will never use ‘WhatsApp’ to contact customers about a tax refund. If you receive any communication through ‘WhatsApp’ saying it’s from HMRC, it is a scam. Email details of the message to email@example.com then delete it.
Social media scams
HMRC is aware of direct messages sent to customers through social media.
A recent scam was identified on Twitter offering a tax refund.
These messages are not from genuine HMRC social media accounts and are a scam. We never use social media to:
- offer a tax rebate
- request personal or financial information
If you cannot verify the identify of the social media account, send the details by email to: firstname.lastname@example.org and ignore it.
HMRC is aware of companies that send emails or texts advertising their services. They offer to apply to HMRC for a tax rebate on your behalf, usually for a fee. These companies are not connected with HMRC in any way.
You should read the ‘small print’ and disclaimers before using their services.