Beware! New HMRC Tax Refund Scam Targets Brits
Scam alert! A slick new phishing scheme is tricking Brits with promises of a hefty tax refund from Her Majesty’s Revenue and Customs (HMRC).
Fake Tax Refund Emails Flood Inboxes
Victims receive ultra-realistic emails claiming they’re owed a tax refund from 2018. The message urges them to click a link to claim their cash – but it leads to a fraudulent website designed to steal personal info.
The fake site is alarmingly close to the real deal. It uses HMRC’s logo, colour scheme, graphics, and font, making it hard to spot the difference at first glance.
Tricky Links and Urgent Deadlines
The scam email masks the actual web address, directing users to a shady URL hosted at jaomshhemcn.lotion-tanning.com. To rush victims, the crooks slap a tight deadline on claiming the refund – typically within 24 hours.
“The attacker claims that the refund is time sensitive—the email was sent on April 16 and the attacker claims that the last day to claim is April 17. If the user does not immediately follow the link, they will lose access to their refund.”
Scam Is Convincingly Real
These scammers have done their homework. The email subject looks legit, complete with a payment reference. Inside, it details a specific refund amount, issuing date, issuing number, and even a transaction ID.
Security experts say the landing page matches genuine government pages closely, making it tough for the average user to spot the fraud.
“The email and landing page that the attacker created were convincing. The email subject appeared legitimate, even including a payment reference. Furthermore, the body of the email contains a specific monetary value for the tax refund, an issuing date, issuing number, and transaction ID. The landing page was similarly elaborate, appearing similar to the true government tax claim page.”
Over 120,000 Mailboxes Targeted
Researchers reveal this scam bombarded more than 120,000 mailboxes through Microsoft Office 365, putting countless innocent Britons at risk.
If you get an email about a tax refund, don’t click any links. Always double-check with the official HMRC website or contact them directly before sharing any personal information.
