HM Revenue & Customs Hoax Email
Warwickshire Trading Standards Service is warning people not to get caught out by a fake email supposedly from HM Revenue & Customs offering a tax refund.
This latest phishing scam reported to the Trading Standards Service looks official and uses HMRC logos. The email informs the recipient that calculations have revealed that they are eligible to receive a tax refund, and asks the recipient to click on a link and complete the tax refund request.
The link takes you to an official looking form which requests personal information including name and address and also requests credit card details.
Once the form is submitted the phishers have all the information they need to steal your identity and your money.
Mark Ryder, Head of Warwickshire Trading Standards Service is concerned that “in the current economic climate people may be persuaded that the site is genuine and submit their details in the hope of some extra cash.
Official agencies do not use email in this way. Whilst they may send emails from time to time, they would never do so requesting login, bank or credit cards details.”
Phishers send out bogus emails that purport to come from all manner of sources including banks and building societies, credit card companies, online retailers, auction websites and payment systems such as Paypal.
Even social networking sites are targeted as many people have comprehensive private profiles on such sites including information on email and physical addresses, phone numbers, dates of birth, and work and education history – a treasure trove for any identity thief who can get hold of users password data.
Avoid being Caught by the Phishers -
HMRC offer the following advice about emails they send and their websites:
The padlock - when you log on to HMRC Online Services you are always in a ‘secure session’ - which is shown by the padlock in the bottom right hand corner of your web browser.
Your name - fraudulent emails are not normally addressed to you personally; they can be missing addressee details or contain something vague such as ‘Dear valued customer’.
Embedded links - the email may include a link that you are asked to follow to take you to a website. Following the link takes you to a site that may look genuine, but it is most probably a fake. In the email, if you hover your mouse pointer over the link it will show the real address you will be directed to.
General Advice to Avoid being Phished -
Be wary of unexpected emails and ask yourself: do I know the person who has sent it? Am I expecting an email and does the email make any sense? Bogus emails are often poorly written and some use random characters or words in the subject line to bypass spam filters.
Never go to a website from a link in an email and enter personal details. Always type in the address in to the web browser and if in doubt, contact the organisation separately on an advertised number.
Keep passwords and PIN numbers safe and secret. Be wary of disclosing any personal information to someone you don’t know.
Many banks and other financial institutions have their own online additional security measures. Make sure that you are aware of them.
Keep your PC secure. Use up-to-date anti-virus software and anti-spyware, security patches and a personal firewall. Be extra careful if using Internet cafes or any PC which is not your own and over which you have no control.
Check your bank statement and your credit history on a regular basis and report any irregularities.
Check your statement. If you notice anything irregular on your account contact your bank immediately.
Visit our website for further information on scams - http://www.warwickshire.gov.uk/tradingstandards