Tax refund spam

[cumbriasteve]

Morning all:

I know we are all fairly good at recognising spam mails but I have just had one of the best I have ever seen...and I mean 'the best'

It was notificiation of a tax refund due to me.

The personal details within the mail were very detailed, the wording very professional, full HMRC header and footer logo and mailing address and the amount was quite low, not the usual silly many £££££'s that sets alarm bells ringing.

I actually had an amateur refund mail last week but this one was way above the normal rubbish.

One part of the mails details makes me suspect they have hacked into some online stores records or similar where a purchase has been made.

I know for a fact HMRC do not send e mails regarding refunds.

As mentioned, probably a case of preaching to the converted but if it saves one person it was worth typing.

 

[mike os]

HMRC will send you a tax statement, by post, then a cheque/bacs payment if applicable. you wont need to do anything, call anyone or reply by email

 

[garethp]

As mentioned HMRC never ever tell anyone by email, one way to check similar emails is to hover the mouse over the 'click here' links and some (most?) mail programs will show you the web address it points to.

Usually the parts that look legitimate point to the relevant site - in this case the HMRC site, but the link that takes you to a page that asks you for your personal details is totally different.

 

[Shox Dr]

It's worth remembering these sort of emails ONLY work IF you respond to them.

Regardless of an email's provenance I NEVER use the link within the email to open anything else

If it's a URL address I will open IE/chrome etc and TYPE in the address I KNOW is correct in this case www.hmrc.gov.uk and then log on from there.

If it's a file such as a doc. I open it in Notebook. Notebook is a simple text editor so cannot run any macros etc.


Stay safe, and don't be fooled or lazy into taking the easy route.

 

[Hitch]

And chances are, if it sounds too good to be true, chances are, it is

 

[Shox Dr]

Another one is to have an email address you only give out to select/important sources. They way if any come to your "any tom dick and harry" email you can just delete them.

BUT don't Ass-u-me if you get one in to the "Select" email it is genuine.

 

[stuvy]

steve, is it worth forwarding it to HMRC to see if they chase them?

 

[cumbriasteve]

steve, is it worth forwarding it to HMRC to see if they chase them?

Yes I did that before deleting it, it really was the most detailed scam I have ever seen.

The reason I suspect they had accessed some sites stored details is the fact it had my full name and previous address on it, which random scam mails never have.

As stated I knew right away it was not correct, having been on a HMRC course where refunds and mails were mentioned, however it was so well done then I am certain even some 'aware' people will fall for it.