08. 09. 10
Taxpayers should be wary of a spam email campaign that is taking advantage of the recent HMRC tax error, an IT security company has warned.
Sophos has intercepted fake emails claiming to be from HMRC. The emails contain the subject line "You Have An HMRC Refund". The email proceeds to inform the recipient that overpayments have been made and that due to the volume of refunds an online application must be completed.
The form requests information including credit card details, date of birth and mother's maiden name.
HMRC are currently in the process of writing to members of the public to inform them they have paid the incorrect amount of tax.
But HMRC has said that they do not issue emails on tax rebates.
Their website states: "HMRC will never send notifications of a tax rebate by email, or question you to tell personal or payment information by email. If you have received an email claiming to be from HMRC that you suspect may be fraudulent, please forward it to phishing@hmrc.gsi.gov.uk."
Graham Cluley, senior technology consultant at Sophos said: "If you do make the mistake of filling in the form, your confidential data is uploaded to a Chinese server. You're not going to receive a windfall because of this form - you've just been phished."
In: NewsAuthor: Public Service