HMRC Scams: How to spot a phishing

Dave Jangid | Debitam By Dave Jangid |
How to spot a phishing | Debitam - Online Account Filing

HMRC Scams: How to spot a phishing

How to spot a phishing | Debitam - Online Account Filing

In 2020, HMRC reported 915,762 allegations of HMRC scam calls, with more than half of them claiming fraudulent tax refunds. The City of London Police recorded a 400 percent spike in scams during the beginning of the pandemic in March, linked to an increase in coronavirus-related fraud.

HMRC impersonation frauds are becoming more complex, and scammers' activity has increased throughout the pandemic. In recent months, scams offering a tax refund or threatening legal action for unpaid taxes have grown quite frequent. They specifically target vulnerable small business owners as well as people who work in the UK on a Visa who are potential scam victims.

They have been successful by playing with people’s fears. That is why so many phishing scams prey on people's greed or curiosity and hence, frauds are becoming more sophisticated and credible.

Unfortunately, 2020 gave birth to a new type of HMRC tax scam

HMRC tax scam | Debitam - Online Account Filing

Any text or email that you receive from the HMRC regarding a coronavirus rebate or fine is fraud. (PERIOD)

This year, a terrible hoax claiming victims are awarded "goodwill payments" because of COVID-19 was discovered. There have even been reports of people being deceived into thinking they owe a penalty of £250 for leaving the house more than once. Both scams typically proceed to ask victims for their bank account details to take up their money. In one of the instances, a self-employed individual handed over her details, only for a scammer to complete her tax return ahead of her and transfer an HMRC reimbursement to his account.

A new phishing scam has arrived in taxpayers’ inboxes, as the fourth self-employed income grant has been open for claims. The fourth grant for small business owners is from 1 February 2021 to 30 April 2021, and it is worth 80% of the trader's average profits. The grant will be available to taxpayers who traded during the tax years 2018/19 and 2020/21. However, the notification directs the small business owners to login in and "follow step 1 of 3 to have your tax refund credited to your bank account." Later the email recipient advises the user to submit details of their passport and driving license to complete the application.

How to spot a scam email or text from HMRC

A checklist for identifying scam phone calls, texts and emails purporting to be from HMRC is provided by

It might be a scam if:

  • it is unexpected
  • relevant to offering you a refund, grant, or tax rebate
  • requests for personal details such as bank account details, passport number, etc.
  • is threatening or pressurising. (etc. HMRC scam calls, threatening arrest)
  • Asks you to transfer money

HMRC is also issuing letters to several self-assessment taxpayers to ensure that their reimbursement claims are not fake.

A typical visa-related scam

HMRC tax scam | Debitam - Online Account Filing

A nursing assistant who was working in the UK on a visa got preyed on by scammers who threatened her by saying she will lose her right to work in the UK if she would not comply with the procedure. But before she hung up, she questioned herself. She was asked to pay £2,500 by 3 pm the same day. The scammers took advantage of her vulnerability. She was worried hence, she used her life savings and ended up borrowing some funds to pay the rest of the funds. It was too late for her to realise it was all a hoax.

The example above ticks every single scam element on the list: Unsolicited, pressuring/threatening, asking for personal information, and most importantly asking to TRANSFER MONEY. HMRC doesn`t do any of these.

Similarly, scammers will also attempt to get access to an agent's online services account. We advise taxpayers and accountants to verify that your login information is highly anonymous and that passwords are updated at regular intervals.

Things to remember!

  1. Check the official email addresses of HMRC, it must always end with ‘’ if anything beyond it appears in the email address, it is a fraud.
  2. HMRC will never send you an email regarding a tax refund.
  3. Even if you are 99 percent certain an email is authentic, it is safer to dismiss your emails and log into your HMRC account on your web browser rather than clicking on any links included in the email.
    HMRC never sends links, thus a link in the email is itself a red flag.
  4. Any message you get from 'HMRC' via WhatsApp is a fraud as it never uses WhatsApp to communicate with the taxpayers.
  5. Any calls creating a sense of urgency is a big red flag, you may get fake calls threatening you to get arrested if you do not pay a fictitious fine. HMRC will never contact you by phone calls in this manner. As frightening as that may seem, you may safely ignore it, hang up or simply block the number.

Greed, curiosity, fear, and vulnerability:

Scams have become elaborate, they know what you fear the most or what you desire the most, they play on your actual emotions like curiosity, greed, and fear. They are also aware of the vulnerable situation you are, as is what happened to the NHS staff who works on a visa. Only criminals would attempt or rush to panic you, so it is completely okay to refuse, reject or ignore any requests.

If you believe you have been a victim of fraud, make sure you check with your bank immediately and report it to Action Fraud. Also, click here or search GOVUK for 'scams' for advice on how to identify legitimate HMRC contacts and how to prevent and report scams.

Dave Jangid | Debitam By Dave Jangid |
Note: Please note that the content of the above blog and the aforementioned information are solely for the purpose of awareness and are informative in nature. The content is designed with intent to ease the understanding while preserving the essence and importance of the compliance rules and shall not be considered as an ultimate replication of the rules. Debitam does not own any responsibility whatsoever for any unpleasant event that may arise due to the misinterpretation of a specific part or whole of the information.

This site uses cookies,
please click here to know more.

I agree, close