We have been made aware that some clients have received scam emails purporting to be from HMRC regarding their VAT submissions. These fraudulent emails claim to be part of a “standard review to ensure compliance with UK tax regulations” and invite recipients to click on a link to log into their gov.uk account.
With the deadline for December VAT returns falling on 7th February, this type of scam email may seem particularly timely, making it even more important to stay vigilant.
What do the scam emails say?
While these emails may initially appear legitimate, there are some key indicators that suggest they are fraudulent:
- Lack of Official Branding – Authentic HMRC emails always include the official logo and a footer outlining confidentiality, scam warnings, and phishing advice. These fraudulent emails omit these essential elements.
- Inconsistent Email Address – By hovering over the sender’s address, it becomes evident that the email does not originate from a legitimate gov.uk domain.
- Misleading Hyperlinks – The link provided within the email does not direct users to an official gov.uk website, raising concerns about its authenticity.
- Informal Language – The tone and phrasing of the email are less formal than those typically used in official HMRC correspondence, often containing unusual wording or grammatical inconsistencies.
How to Spot Phishing Emails
Phishing emails are designed to trick recipients into revealing personal or financial information. Common red flags include:
- Urgency or Threats – Scammers often pressure recipients to act quickly, claiming there will be penalties or legal action.
- Requests for Sensitive Information – HMRC and other government bodies will never ask for passwords, bank details, or other personal data via email.
- Unexpected Attachments or Links – Be cautious of any email urging you to open an attachment or click a link, especially if it seems unexpected. Always hover over links to check their true destination.
- Spelling and Grammar Errors – Poorly written emails with obvious mistakes are a sign that the message is not from a legitimate source.
If you receive such an email, do not click on any links or provide personal information. If you are unsure about any correspondence claiming to be from HMRC, please feel free to contact us on 01905 777600 or hello@ormerodrutter.co.uk.
Scam emails can be reported to HMRC by forwarding the email to phishing@hmrc.gov.uk.
For further guidance on identifying and reporting phishing scams, visit the official HMRC website.
More guides and blogs can be found on our insights page.
