HMRC Phishing Scam

We wish to advise our clients that there are a number of new HMRC phishing scams in the form of emails.

The emails follow the same general format and promise a tax refund in exchange for personal, credit card or banking details. The emails often link to a clone of HMRC's website to make the email appear genuine.

HMRC will never send notifications of a tax rebate/refund by email, or ask you to disclose personal or payment information by email. If you do receive one of these emails do not open any attachments or visit the website contained within the email or disclose any personal or payment information. A selection of scam email addresses used to distribute the tax rebate emails can be seen below:

• reve.alert@hmrc.gov.uk
• services@hmrc.co.uk
• noreply@hmrevenue.com
• service@hmrc.gov.uk
• service.refund@hmrc.gov
• secure@hmrc.co.uk
• hmrc@gov.uk
• taxes@hmrc.co.uk
• taxrefund-notice@hmrc.gov.uk
• taxrefund@hmrc.gov.uk
• refund-help@hmrc.gov.uk
• service@online.com
• email@hmrc.gov.uk
• refund.alert@hmrc.gov.uk
• refunds@hmrc.gov.uk
• srvcs@hmrc.gov.uk
• alertsonline@hmrc.co.uk
• info@hmrc.gov.uk
• rebate@hmrc.gov.uk

HMRC does not use any of the above email addresses.

Anyone who receives one of these emails should not open it but instead forward it to phishing@hmrc.gsi.gov.uk and then delete it. 

For more advice, please visit GOV.UK and search “phishing”.