HMRC phishing scams – how to spot and avoid bogus communications

Fake emails, calls and messages suggesting they are from Her Majesty’s Revenue & Customs (HMRC) have grown exponentially in the last five years with many people falling foul to fraudsters.

Here, Perrys Chartered Accountants discusses the latest HMRC cyber scams doing the rounds and how to spot bogus communications:

In 2021, HMRC received more than 670,000 calls from individuals reporting tax scams. Despite a significant drop in reports to HMRC in recent months, statistics show that tax-related scams doubled during the pandemic and HMRC is still advising caution of any correspondence – particularly via text or email – implying it is from the tax authority.

Scams can come in many forms. However, the most common tactic used by fraudsters is contacting potential victims via automated messages. So, what should you look out for?

HMRC email scams

Phishing attacks aren’t new, but the tactics employed by fraudsters have become increasingly sophisticated over the years with many able to replicate email addresses from authorities, such as HMRC, that on first glance look bona fide.

These attacks aim to extract personal information and data from an individual that enables fraudsters to steal identities, bank details and more.

One such campaign doing the rounds is an email telling customers that they are eligible to receive an employment income support scheme credit during the COVID-19 pandemic. If you receive such an email, you should not reply to it, click on any links in the email or open any attachments. You should also avoid disclosing any personal or payment information. Instead, report it immediately to HMRC by emailing it to phishing@hmrc.gov.uk.

Fake tax rebates

Another common scam is the offer of a tax rebate either via text or email. HMRC will never contact anyone by text or email about tax rebates, so any messages received offering a refund will certainly be fake. If you receive any such message, do not reply but report it to HMRC and then delete it.

Be wary of website links and malicious web pages

HMRC will never ask you to click on a link to complete your details online to receive a rebate.

Web pages can also be dangerous with many fake sites cloning or copying official pages from HMRC’s website or claiming to be officially affiliated with the tax authority. To avoid being fooled by a fake website, always visit HMRC directly by typing the government’s official URL https://www.gov.uk/ into your browser.

HMRC text scams

HMRC will never ask for any personal or financial information when sending out texts. If you receive such a text, do not reply to it or open any links contained in the message. Instead, you can send any phishing text messages to HMRC using the text number 60599 or by emailing it to phishing@hmrc.gov.uk.

HMRC phone scams

Phone scams are performed using a variety of methods and are often used to target elderly and vulnerable people.

A popular way for fraudsters to target potential victims is by using an automated message. HMRC is aware of a scam which tells the receiver that they are the subject of a lawsuit and to press 1 to speak to a caseworker to make a payment. This is false. If you receive such a call, you should end it immediately.

Other similar scams might refer to National Insurance number fraud or tax refunds and will ask you to supply bank or credit card information. If you are at all unsure, or you cannot verify the caller, hang up and report it to Action Fraud.

When reporting phone scams, you should include the date of the call, the phone number used to contact you and what the call was about. You can also contact HMRC directly on its phone number 0300 200 3310 to verify the legitimacy of any calls you receive alleging to be from the authority.

HMRC WhatsApp scams

HMRC will never use WhatsApp to contact customers about a tax refund. If you receive any such communication via WhatsApp saying it is from HMRC, you should report it immediately by emailing HMRC and then delete it.

HMRC social media scams

One of the most recent social media scams being used to con people is the distribution of direct messages via Twitter offering a tax refund. These messages are not genuine and HMRC will never use social media platforms, such as Twitter, Instagram, Facebook and LinkedIn, to offer tax rebates or request personal information. Ignore all such messages and report them to HMRC straight away.

HMRC refund companies

Refund companies that send emails or texts advertising their services and offering to apply for a tax rebate on your behalf in return for a fee are not connected with HMRC in any way. Before using any such service, you should read the company’s terms and conditions or disclaimers and think carefully before instructing them to assist you. If in doubt, contact a professional accountant for advice.

HMRC customs duty scams

Changes officially introduced by HMRC on 1 January 2021 mean that some UK consumers buying goods from EU businesses might need to pay customs charges when their goods are delivered. This change in regulations has resulted in a surge of associated email and text scams asking for customs duty payments.

Customers are contacted via false emails or texts and told they must pay customs duty to receive a valuable parcel which doesn’t exist. If you are not expecting any parcel or if you are in any doubt as to the authenticity of such messages, then do not reply. Instead, you should report any suspicious activity to HMRC immediately by emailing phishing@hmrc.gov.uk.

University students taking part-time jobs

According to HMRC, undergraduates taking part-time jobs are at increased risk of falling victim to scams – particularly if they are new to interacting with the tax authority and unfamiliar with its processes.

Between April and May 2021, more than 5,000 phone scams were reported to HMRC by 18 to 24 year olds. The advice is to be wary if you are contacted out of the blue by someone asking for money or personal information.

Mike Fell, Head of Cyber Security Operations of HMRC, said: “We see high numbers of fraudsters contacting people claiming to be from HMRC. If in doubt, our advice is – do not reply directly to anything suspicious, but contact HMRC through GOV.UK straight away and search GOV.UK for ‘HMRC scams’.

For further information and guidance about HMRC phishing scams, visit HMRC’s official web page https://www.gov.uk/topic/dealing-with-hmrc/phishing-scams.

Scottish residents urged to be vigilant as schools face summer crime spate

Schools in Scotland are being warned to take precautions amid fears of a rise in crime over the summer holidays as cost of living soars.

As many schools across the country close their doors for the summer holidays, specialist insurer Ecclesiastical says schools will be an attractive target for criminals over the coming months.

Ecclesiastical is encouraging residents in Scotland who live near local schools to be vigilant this summer and report any unusual or suspicious activity they notice on school grounds.

Ecclesiastical has reported an uptick in schools being targeted over the summer months including vandalism, arson, break-ins, smashed windows, theft of lead from roofs and stolen laptops. In July last year, Kirkmichael Primary School1 in Perthshire was targeted by vandals who damaged the school’s playground including greenhouse and nursery playhouse.

Now with Covid-19 restrictions lifted and against a challenging economic backdrop and soaring prices, there are worries there will be a large spike in criminal activity.

Faith Kitchen, customer segment director at Ecclesiastical Insurance, said: “Schools are far more vulnerable during the summer holidays when school buildings are closed and largely unoccupied, tempting opportunists. It is vital that schools take steps to protect their premises from unscrupulous offenders.

“There are a number of measures schools can take to better secure school property and assets, which would ideally be a combination of both physical and electronic protection.

“Fencing around the perimeter can often offer a good first line of defence against unwanted visitors, while CCTV can act as a visual deterrent for those not wanting to be caught on camera. Vigilance from the local community can be a huge help.

“We urge those who live near schools to be vigilant this summer and report any unusual or suspicious activity they notice on school grounds.”

 How to protect schools in Scotland this summer

  • Ensure CCTV systems have remote 24/7 monitoring services. Monitoring and alerting the police is far more effective than tracing criminals after a crime has taken place.
  • Install remotely monitored intruder alarms and change alarm security codes and passwords on a regular basis.
  • Install security lighting systems that have motion sensors to detect body movements.
  • Restrict access to school premises. Well-designed perimeter security such as walls, fences and electric security gates, and anti-climb paint help to prevent people from getting onto school sites.
  • Restrict vehicular access to the school site. Locate any designated parking as far from the school building as possible. The further thieves have to travel on foot the greater the risk of detection.
  • Use security marking systems such as SmartWater which can help with successful prosecution of thieves.
  • Ask the local community near your school to be vigilant and report any unusual or suspicious activity they notice on school grounds.
  • Inform neighbourhood watch schemes / police liaison officers of planned work over the holidays as thieves might pose as contractors.
  • Seek advice. Specialist insurers can offer advice and expertise to help schools manage security risks. Insurers can offer a combination of onsite and remote risk management services including security assessments and advice, alongside broader property protection and building valuation services.

Ecclesiastical Insurance offers a range of risk management support and guidance to help schools manage the risks they face.

For more information, visit the Hub for Education.

Police appeal after woman seriously injured in Greenside Place robbery

Detectives are appealing for information following a robbery and assault in Edinburgh.

In the early hours of Tuesday, 5 July, 2022, a 25-year-old woman was pushed from behind down the stairs and had her bag stolen near Greenside Place, between Omni Centre and Edinburgh Playhouse.

The woman sustained serious injuries and attended at the Royal infirmary of Edinburgh for treatment.

Detective Constable Kieran Keddie, of Gayfield CID, said: “The victim sustained serious injuries as a result of the incident and our enquiries are ongoing.

“We believe that members of the public helped the woman following the incident and we would urge those that assisted to contact officers as soon as possible.

“Anyone who may have witnessed the incident or has any information that can assist with our investigation should contact Police Scotland via 101, quoting incident number 1508 of 6 July.

“Alternatively, a call can be made anonymously to the charity Crimestoppers on 0800 555 111.”

Fraudster to appear in court

A 40-year-old man has been arrested and charged in connection with a large scale fraud in Edinburgh, Lothians & Fife which happened between January 2018 and April 2022.

Following an investigation by Drylaw Initiative Team, it was established that the man defrauded 21 victims out of £25,000.

He is expected to appear at Edinburgh Sheriff Court today (Friday, 8 July, 2022).

Online Safety Bill amendment: No hiding place for child sex offenders

Greater powers to tackle child sexual abuse online will be introduced through an amendment to the Online Safety Bill, the Home Secretary announced yesterday (Wednesday 6 July 2022).

The amendment will give Ofcom extra tools to ensure technology companies take action to prevent, identify and remove harmful child sexual abuse and exploitation (CSAE) content.

Ofcom, the UK’s regulatory authority for telecommunications, will be able to demand that technology companies such as social media platforms roll out or develop new technologies to better detect and tackle harmful content on their platforms. If they fail to do so, Ofcom will be able to impose fines of up to £18 million or 10% of the company’s global annual turnover, depending on which is higher.

Home Secretary, Priti Patel said: “Child sexual abuse is a sickening crime. We must all work to ensure criminals are not allowed to run rampant online and technology companies must play their part and take responsibility for keeping our children safe.

“Privacy and security are not mutually exclusive – we need both, and we can have both and that is what this amendment delivers.”

The National Crime Agency estimate there are between 550,000 to 850,000 people in the UK who pose a sexual risk to children. In the year to 2021, there were 33,974 obscene publications offences recorded by the police, and although some improvements have been made, it is still too easy for offenders to access harmful content online.

Access to such content online can lead to offenders normalising their own consumption of this content, sharing methods with each other on how to evade detection, and escalation to committing contact child sexual abuse offences.

Digital Minister, Nadine Dorries said: “Tech firms have a responsibility not to provide safe spaces for horrendous images of child abuse to be shared online. Nor should they blind themselves to these awful crimes happening on their sites.

Rob Jones, NCA Director General for child sexual abuse, said: “Technology plays an extremely important part in our daily lives and its benefits are undeniable.

“But it is also a fact that online platforms can be a key tool in a child abuser’s arsenal. They use them to view and share abuse material, seek out and groom potential victims, and to discuss their offending with each other.

“Identifying these individuals online is crucial to us uncovering the real-world abuse of children.

“We are taking significant action in this space and, alongside UK policing, we are making record numbers of arrests and safeguards every month.

“While this will always be a priority, we need tech companies to be there on the front line with us and these new measures will ensure that.”

Sir Peter Wanless, NSPCC Chief Executive, said: “We need urgent action to protect children from preventable online abuse. Our latest analysis shows online grooming crimes have jumped by more than 80% in four years.

“The Online Safety Bill is a once-in-a-generation opportunity to ensure children can explore the online world safely.

“This amendment will strengthen protections around private messaging and ensure companies have a responsibility to build products with child safety in mind. This positive step shows there doesn’t have to be a trade-off between privacy and detecting and disrupting child abuse material and grooming.”

The amendment will support innovation and the development of safety technologies across the technology industry and will incentivise companies in building solutions to tackle CSEA which are effective and proportionate.

The government-funded Safety Tech Challenge Fund is demonstrating that is it is possible to detect child sexual abuse material in end-to-end encrypted environments, while respecting user privacy.

You can also read the Home Secretary’s op-ed for the The Telegraph.

The Little Book of Big Scams

Nobody, whether a business or individual, wants to be a victim of a scam and suffer the financial loss, frustration and worry that it causes.

The information contained in this booklet can provide you with enough knowledge to have confidence in going about your daily business without the fear of falling foul of a scam.

You can view the booklet here ⬇️

https://www.sbrcentre.co.uk/…/Little-Book-of-Big-Scams…

NSPCC warns of worrying levels of online child abuse as grooming crimes in Scotland continue to rise

Figures obtained by the NSPCC reveal online grooming crimes recorded by Police Scotland reach almost 3,000 in five years, with offences against under 13s rising by more than 60%.

Analysis of Freedom of Information data from Police Scotland shows that in 2021/22 there were 636 offences of Communicating Indecently with a Child, compared with 429 in 2017/18 – a 48% rise. For victims under the age of 13, there was a steeper rise with 369 in 2021/22 and 226 in 2017/18.

Data* from 41 UK police forces across the UK show an 84% rise in these crimes since 2017/18, with a total of more than 27,000 offences in the past five years.

The NSPCC says the sheer scale of offending shows the vital importance of ensuring that the Online Safety Bill effectively tackles child sexual abuse and has practical suggestions for how this is best done.

This should include giving the regulator, Ofcom, the powers to proactively tackle abuse in private messaging, making platforms work together to stop grooming pathways and stopping offenders from using social networks to organise abuse.

One 15-year-old girl who was groomed on multiple sites told Childline: “I’ve been chatting with this guy online who’s like twice my age. This all started on Instagram but lately all our chats have been on WhatsApp.

“He seemed really nice to begin with, but then he started making me do these things to ‘prove my trust’ to him, like doing video chats with my chest exposed. Every time I did these things for him, he would ask for more and I felt like it was too late to back out.

“This whole thing has been slowly destroying me and I’ve been having thoughts of hurting myself.”

Sir Peter Wanless, NSPCC Chief Executive, said: “Online grooming is taking place at unprecedented levels and only concerted action will turn the tide on this tsunami of preventable abuse.

“The crucial Online Safety Bill is the opportunity to deliver the legislative change we urgently need to address head on these preventable crimes against children.

“We strongly welcome the Government’s ambition to deliver world-leading legislation. But as it seems increasingly clear that the pandemic has resulted in a long-term increase in the abuse threat, the current proposals must go further now to tackle online sexual violence and prevent avoidable abuse.”

The charity is asking the public to email their MP to support amendments to the legislation that aim to improve its response to child sexual abuse.

The NSPCC has set out a five-point action plan for the Online Safety Bill to systemically prevent avoidable child sexual abuse.

Polling shows widespread public support for the measures to be adopted so the legislation achieves its ambition of giving children receive a higher standard of protection online.

  1. Give the regulator powers to proactively tackle abuse in private messaging

Two thirds of child abuse is currently found in private messaging so the NSPCC welcomes that it will be in scope of the Bill.

But the charity wants Ofcom to be given power to proactively require firms to use technology to detect and disrupt grooming and the sharing of child abuse images.

  1. Make platforms work together to tackle grooming pathways

The NSPCC knows grooming doesn’t just happen on one site and offenders use well known grooming pathways to target children.

Companies should have a clear legal duty to address cross platform harm and legally co-operate with each other to disrupt grooming.

  1. Stop offenders from using social networks to organise abuse – breadcrumbing

Offenders perfectly legally use social media to form networks, then advertise a sexual interest in children and signpost to illegal child abuse content hosted on third party sites.

The NSPCC wants the Bill amended to combat the waysoffenders facilitate abuse on social media, which it says could prevent millions of interactions with accounts that contribute to grooming.

  1. Adopt a Violence Against Women and Girls Code of Practice

The Government should commit to a statutory code of practice on violence against women and girls to ensure the Online Safety Bill has a systemic  and enforceable focus on online sexual violence.

  1. A children’s watchdog that represents children’s needs

Children make up one in five UK internet users but are inherently vulnerable, according to the NSPCC. The charity said the Online Safety Bill can achieve its ambition to give children a higher standard of protection by creating a statutory watchdog to promote children’s interests, funded by a levy on the tech industry.

This user advocacy body would ensure child protection is front and centre of regulation, prevent harm by acting as an early warning system to flag emerging risks and call for swift action. This would be similar to the role played by Citizens Advice in the energy and postal sectors.

CCTV appeal following Meuse Lane assault: do you know these men?

Police Scotland has released images of four men they believe may hold information which might assist in relation to a serious assault which left a 20-year-old man unconscious, at Meuse Lane, Edinburgh, around 10.10pm on Saturday, 11 December, 2021.

The first man in the images is described as white, in his mid-40’s, around 5ft 8ins, with short dark hair and of medium build. He was wearing a navy blazer.

The second man is described as white, in his mid-40’s, around 6ft, bald, and of medium build. He was wearing a dark jacket.

The third man is described as white, in his mid-40’s, around 5ft 7ins, bald and of medium build. He was wearing a dark jacket with a blue top underneath.

The fourth man is described white, in his mid-40’s, around 5ft 10ins, and of medium build. He was wearing a dark beanie hat, a dark jacket and blue jeans.

Detective Constable Christopher Docherty of Edinburgh CID, said: “I would urge the men depicted in these images, or anyone who has information relating to them, to make contact with the police.

“Anyone with any information is asked to contact CID via 101, quoting incident number 3747 of Saturday, 11 December, 2021. Alternatively, call the charity Crimestoppers on 0800 555 111 where information can be passed on anonymously.”

Police appeal for information after motorcycle fails to stop for officers

Police in Edinburgh are appealing for information after a motorcycle failed to stop for officers on Sunday (26 June, 2022).

Around 12am, officers saw the vehicle, which was later identified as a stolen orange KTM motorcycle, being driven at speed along Leamington Terrace.

The motorcycle was signalled to stop by officers but was driven off down Gilmore Place, towards Viewforth.

The motorcycle was then driven along Dundee Street and towards Fountain Park, in the Fountainbridge area, down Drysdale Road and onto the West Approach Road. It was last seen in the Gorgie Road area.

Extensive enquiries are ongoing to trace the driver, passenger and the vehicle. No one was injured during the incident.

The motorcycle’s driver and passenger are both described as wearing dark clothing and balaclavas.

The motorcycle had earlier been reported stolen from Spittal Street, between 7.30pm and 8.30pm on Monday 20 June 2022.

Detective Sergeant Ross Dunn, of Drylaw Police Station, said: “Our enquiries to trace the driver and vehicle are ongoing.

“We believe the area would have been quite busy with members of the public and are appealing to anyone who may have witnessed the incident to get in touch.

“If you were in the area at the time, please think back and get in touch with us if you have any information which may be able to assist our investigation.

“From our CCTV enquiries, we believe a woman may have filmed the incident in the Fountainbridge area. I am particularly keen to speak with her and would ask her to contact officers as soon as possible.

“I would also ask anyone with dash-cam footage to come forward, you may have captured something which could assist us in our enquiries.”

Anyone with any information is asked to contact Police Scotland on 101 quoting incident 0008 of Sunday, 26 June, 2022.

Police appeal after woman injured in Ocean Terminal incident

Police are appealing for witnesses after a 30-year-old woman was injured at Ocean Terminal Edinburgh at the weekend.

The incident happened around 5.30pm on Saturday (25 June, 2022) when the woman was struck by a shopping trolley which had been thrown from a higher level of the Red Car Park at Ocean Terminal Shopping Centre by a group of youths.

The trolley struck the 30-year-old woman causing minor injury, she did not require hospital treatment but was left extremely shaken by the incident.

Several members of the public came to the aid of the victim and we are asking for them, any other witnesses or anyone with dashcam footage to make contact with police on 101 quoting incident number 3433 of Sunday 26 June 2022.

Alternatively, anyone with any information can contact the independent charity Crimestoppers 100% anonymously on 0800 555 111 or via their anonymous online form at crimestoppers-uk.org