The growing international problem of fraudulent emails continues to target taxpayers who might believe they are due a tax refund from HMRC.
HMRC have published the text of a number of fraudulent emails to help taxpayers recognise when they have received an email that is NOT from HMRC. HMRC will also be issuing regular updates on this issue.
If you receive an email that appears to be fraudulent it is important NOT to provide any information to the sender and to avoid following links contained in the email or opening attachments to the email. You can can forward emails which appear to be fraudulent to the following firstname.lastname@example.org
One of the latest emails requests that taxpayers “update your account to the new EV SSL certification”. This email is designed to steal User IDs and passwords and is not from HMRC. HMRC never request both your User ID and password.
This fraudulent email is sent from onlineservices@HMRevenueCustoms.org