Several Taxfile customers have recently told us that they’ve been receiving emails, supposedly from HMRC, inviting them to click links within the emails in order to apply for tax refunds. Regrettably, some have confirmed that they did indeed click the links then log onto fake HMRC websites, which looked every bit real to them, thereby giving away such sensitive information as their bank details and things like their mother’s maiden name. Handing over such sensitive information to fraudsters would be an expensive mistake. In view of this, we thought we’d give our readers more information on what to look out for, what to expect to receive from HMRC, and what not to.
Firstly: How to Recognise a Scam Email
Here is an example of a real phishing (scam) email recently received by one of our customers. We’ve highlighted various areas of the email to indicate some of the telltale signs that the email is, indeed, a phishing attempt by fraudsters rather than a genuine communication from HMRC.
Some of the many telltale signs that this email is fake include:
- The sender is from a non-official domain (hmrcupdate.com is *not* a genuine HMRC website). Be careful, though, because some of the more advanced phishing emails do include genuine HMRC domains through what’s known as domain ‘spoofing’.
- The recipient is not identified by name in either the ‘To’ field nor in the salutation (‘Dear Sir | Madam’ is a dead giveaway, as is the fact that the email was sent to ‘undisclosed recipients‘!). Genuine HMRC emails will always address you by the name you provided them.
- Phishing emails often include silly errors that simply would not be published by the likes of HMRC. Under the logo, the date is wrong — it does not even mention a month!
- The email states that you ‘are due some refunds‘ (plural). If HMRC did send emails announcing that a refund was available (and it doesn’t) then it would be singular, not plural! This is one of many hints that the sender has poor English (read on).
- ‘Press here‘ is another example of poor English. Of course, in the UK, we’d say ‘Click here’.
- ‘Povide us‘ is clearly spelt wrong — there should be an ‘r’ in ‘Provide’. Spelling errors are a common indication that the email is non-genuine and has instead come from overseas where English spelling and grammar are often not as accurate as they should be.
- Further down it says ‘for refund‘ whereas it should say ‘for the refund’. Poor English/grammar again and another hint that this is a scam.
- When you hover over the link included in the email (*without* clicking it), if your email application’s “status bar” is showing at the bottom of the screen, you can see where the link is pointing to. In this case it’s pointing to a goo.gl domain and this simply wouldn’t be the case if this was a genuine HMRC email.
- Lastly, the email states that you have only 5 days to action the request. That is yet another telltale sign that this is a phishing scam. Fraudsters try to panic you into acting whereas HMRC would not make such a statement in a genuine email.
So you can see, when you look very carefully, that this is clearly a scam email. However, we should warn readers that other phishing emails are not so obvious. In fact, we’ve seen some real improvements in scam emails in recent months. One recent email was so genuine-looking that we’re not even 100% sure ourselves whether it’s a scam or not.
So what do you do if you are still not sure if an email is genuine?
If, after close scrutiny, you are still not sure whether the email is genuine, there are several things you can do … Read more
[Updated]: It’s common knowledge that most of Taxfile’s South London staff are multi-lingual but can you guess which staff member speaks no less than four languages fluently (Russian, Pashto, Dari and English) and which staff member is into both metal music and Irish dancing? And who should you ask for if you need payroll services? And who specialises in bookkeeping … who in limited company accounts and so on? Our staff ‘mind map’ tells you a bit more about each member of the team, what their specialities are, key interests and, of course, their contact details in case you ever need their help. Take a look … Read more
A warning and reminder to landlords: the Chancellor’s Summer budget back in July will hit buy-to-let investors’ profits once the changes kick in, so now is the time to start planning ahead. Not all landlords will be affected though; if their rental property is mortgage free or if they sell within the next 2 years these changes won’t affect them. However those landlords that are Higher and Additional taxpayers will notice their tax relief reduce by 2020. Also, investors near the tax threshold could find themselves in the next tax bracket, which could have a knock-on effect and increase their tax exposure.
Hosts who rent out a spare room could soon see themselves being straddled with an unexpected tax bill if companies like ‘Airbnb’ are forced to share data with UK authorities.
If you still haven’t filed your tax return for the financial year up to 5 April 2014 you can expect the penalties from HMRC to begin racking up daily — and potentially very significantly — starting from Friday 1 May.