ICAEW.com works better with JavaScript enabled.

HMRC flags self assessment scam surge

7 January 2021: As the 31 January deadline for self assessment tax returns approaches, accountants and their clients are being warned of a flood in scams purporting to be from HMRC – and warning that if it sounds too good to be true, it probably is.

As HMRC issues thousands of SMS messages and emails as part of its annual self assessment tax return push, the department has warned taxpayers completing their returns to avoid being caught out by a rise in fraudsters using calls, emails or texts to offer fake ‘tax rebates’ or ‘tax refunds’. 

Fraudulent HMRC communications have already become commonplace. In the last 12 months, the tax authority has responded to more than 846,000 referrals of suspicious HMRC contact from the public and reported over 15,500 malicious webpages to internet service providers. 

Almost 500,000 of the referrals from the public offered bogus tax rebates, whereby fraudsters use phone, email or text messages to contact their victims, primarily offering them bogus tax rebates to extract their personal details, and particularly their bank details.

The impersonation scams use language intended to convince victims to hand over personal information, including bank details, in order to claim a 'refund'. Criminals will use this information to access taxpayers’ bank accounts, trick them into paying fictitious tax bills or sell their personal information to other criminals. There are also reports of scammers becoming aggressive and threatening toward victims.

HMRC’s Interim Director General for Customer Services Karl Khan said criminals were taking advantage of the self assessment deadline to panic customers into sharing personal or financial details and even paying bogus ‘tax due’. “If someone calls, emails or texts claiming to be from HMRC, offering financial help or asking for money, it might be a scam. Please take a moment to think before parting with any private information or money,” said Khan.

Pauline Smith, Head of Action Fraud, is urging people to report any suspicious calls or messages they receive, even if they haven’t acted on them, to the relevant channels (see below for more details). “This information is crucial in disrupting criminal activity and is already helping HMRC take down fraudulent websites being used to facilitate fraud,” said Smith. 

HMRC is stressing that taxpayers should not give out private information, reply to text messages or download attachments and click on links in unexpected text messages or emails. This year, for the first time, HMRC will be sending reminders about self assessment filing and payment to represented taxpayers. ICAEW’s Tax Faculty recommends that agents alert their clients about the genuine HMRC contact they will receive and the risk of scams.

HMRC has published a checklist to help taxpayers identify if a contact, whether by phone, email or text, is genuine. In particular, it could be a scam if it is unexpected, offers some form of refund or grant, asks for personal information like bank details, is threatening or tells you to transfer money.

Meanwhile, City of London Police have issued warnings that fraudsters are taking advantage of home working and our collective reliance on broadband with what the police term ‘computer software service fraud’. The fraud involves telephone calls or pop-up windows appearing on your computer claiming to be from a broadband provider and telling you there is a problem with your router. The fraudster then talks victims into downloading remote access software onto their computer and logging onto their internet banking account to claim a refund. The fraudster then steals funds from the victim’s bank account.

Sophie Wales, Director of ICAEW’s Tax, Ethics and Law Group, said scammers were increasingly convincing in their approaches. “There are ways you can check if something is genuine so as a rule of thumb, you should always be sceptical and cautious and under no circumstances should you feel pressured into paying any money or giving away personal information.”

  • Any suspicious HMRC communications can be reported to HMRC at phishing@hmrc.gov.uk or by sending a text to 60599. Phone scams can also be reported online
  • Led by UK Finance and the government, the Take Five campaign is setting out to remind people of the dos and don’ts of financial fraud and scams and urging them to stop and consider whether a situation is genuine. For more information go to takefive-stopfraud.org.uk