People in the UK are receiving text messages about a supposed pending payment from UK tax agency HM Revenue and Customs (HMRC).
The message urges you to follow a link and fill in a form to claim your payment.
However, the message is not from HMRC and there is no pending payment.
Instead, the message is a phishing scam designed to steal your personal and financial information.
Here’s what the scam text message looks like:
If you follow the link, you will be taken to a fraudulent website that looks like it belongs to HMRC. The bogus site includes the GOV.UK logo and secondary links to make it appear legitimate. However, the site has no connection to GOV.UK.
Once on the fake site, you will be asked to provide your name and address:
After you click the “Start Claim” button, a “Tax Refund Claim” form will load in your browser. The form asks for personal information, including your email address and email password and your credit card details:
After completing the form, you may be redirected to the genuine HMRC website.
Meanwhile, online criminals can use the stolen information to commit credit card fraud, hijack your email account, and steal your identity.
Tax refund scams like this are very common and are often sent via email as well as SMS. Such scams regularly target taxpayers in many different countries.Be wary of any email or text message that claims that you can get a tax refund by clicking a link or opening an attached file.
HMRC has published information about phishing scams on its website.
Since you’ve read this far…
…can I ask you for a big favour?To enhance your privacy and security and offer you a better user experience, Hoax-Slayer is now ad-free. To keep the site online, I now rely on voluntary contributions from site visitors along with commissions from a few trusted products and services that I promote via reviews on the site.
If you found the above report useful, please consider supporting Hoax-Slayer by making a donation. Any amount you can give will be greatly appreciated.
You can donate using your credit card via the form below. Donations are collected securely via the online payment service Stripe. Stripe uses state of the art security to keep your data safe.
Thank-you.
Brett Christensen