Announcement

Collapse
No announcement yet.

Proceed with caution - HMRC scam

Collapse
This topic is closed.
X
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Proceed with caution - HMRC scam

    Today, hours after filling in a Tax Return online I receive this email

    From:- HM Revenue and Customs [[email protected]]

    Subject:- Notice of Underreported Income
    Taxpayer ID: *****************
    Tax Type: INCOME TAX
    Issue: Unreported/Underreported Income (Fraud Application)

    Please review your tax statement on HM Revenue and Customs (HMRC) website (click on the link below):

    review tax statement for taxpayer id: ************* ( link now removed )

    HM Revenue and Customs

    On clicking on the link sent - you are taken to a very very complete clone of the HMRC website whre it tries and get you to download an exe file. It even has a proper SSL ( Secure server ) certicate issued by Versign !!!

    http://online.hmrc.gov.uk.iiizad1s.c...**************

    https://online.inlandrevenue.gov.uk/...sinessHelpdesk

    On no account do this or your systems and information will be fully compromised !

    Am in iT & Network Security and I nearly fell for this one which appears to be Russian based. Ive contacted HMRC and they have been unindated with calls today about this and its a know issue.

    It would appear that their computer systems must be compromised as the originator of the email could not of know that I was filling online this morning specially with theemail address I used !!
    Last edited by BO55 VXR; 19 October 2009, 02:57 PM.
    sigpic

  • #2
    I've removed your Taxpayer ID - just in case it's a real one

    Comment


    • #3
      these scammers are getting clever and more desperate by the day. you would think the hmrc would be full secured against any type of hacking with all the records and information the have on people.good heads up thou as a fair few people will fall for it

      Comment


      • #4
        Originally posted by BO55 VXR View Post
        I've removed your Taxpayer ID - just in case it's a real one
        Thanks Chris - but thats a spook too

        Originally posted by vxrrob View Post
        these scammers are getting clever and more desperate by the day. you would think the hmrc would be full secured against any type of hacking with all the records and information the have on people.good heads up thou as a fair few people will fall for it
        TBO the website was good, very good infact, even using the old inlandrevenue name which HMRC dont use anymore but but for me the most worrying part was the SSL certicate issued by Versign !
        sigpic

        Comment


        • #5
          you would have thought the certifacate provider would have done some checks on the website before giving it the ccl.

          Comment


          • #6
            Originally posted by vxrrob View Post
            you would have thought the certifacate provider would have done some checks on the website before giving it the ccl.
            Spook website appears to link back to a server held on Jersey

            The reason I think their systems have probably been compromised is the very fact that I received theis email @ 12.31pm, within 1-2hrs of submitting the return - scary stuff !
            sigpic

            Comment


            • #7
              Very same thing happened too me with paypal, i smelt a rat as i know my payment went through and i got an email saying it didnt straight away, asking to update my account details
              sigpic

              Comment


              • #8
                Seems a few have fallen for it

                http://www.kenkai.com/seo-blog-article-223.htm

                Astra

                Comment


                • #9
                  Sorry, but the fact that you filled out a return this morning is just a coincidence. We started receiving ones from the IRS, so knew they were scams. The same format was used, but with a HMRC e-mail address so we have carried on binning them - I have 16 of them to delete tonight when I shut Outlook.

                  Also look out for a Microsoft windows e-mail about Conflicker.B Infection Alert.

                  I preferred it when I was just being asked to buy Cialis and Viagra.

                  Comment


                  • #10
                    I've lost count how many of these emails I have recieved recently, the vxronline email account is getting loads!!
                    | Find | Watch | Follow |

                    Comment


                    • #11
                      Originally posted by Sheriff View Post
                      I've lost count how many of these emails I have recieved recently, the vxronline email account is getting loads!!
                      First one ive ever had

                      Originally posted by ARAF View Post
                      Sorry, but the fact that you filled out a return this morning is just a coincidence. We started receiving ones from the IRS, so knew they were scams. The same format was used, but with a HMRC e-mail address so we have carried on binning them - I have 16 of them to delete tonight when I shut Outlook.
                      Indeed and you could be right about been a coincidence, but what a coincidence and you can imagine what I thought when it was only received with 1 hr of a submission to HMRC.

                      Originally posted by ARAF View Post
                      Also look out for a Microsoft windows e-mail about Conflicker.B Infection Alert.
                      Not had any of those either


                      Originally posted by ARAF View Post
                      I preferred it when I was just being asked to buy Cialis and Viagra.
                      LOL, or that matter extensions etc
                      sigpic

                      Comment


                      • #12
                        my boss was on about this the other day .he gave it to his accountant and asked if this was right but his account said it was a fake/scam because some thing on the e-mail they sent were wrong so be careful !

                        Comment


                        • #13
                          there's no hope for us numpty's who dont recognise these sort of things
                          sigpic
                          stealth no more but beware of the silver lightning GSI with vxr power
                          M.U.F.C.
                          http://www.courtenaysport.co.uk/

                          Comment


                          • #14
                            Heads up for this post.

                            I don't do this sort of things myself as I leave it to my accountants. Just wondering, if my accountants fall into this sort of scam with my details, will I be out of pocket in anyways?
                            Zaffy VXR| RARB | Vxracing 19s in Gloss Black |Stage 3丨Turboback Miltek 丨TX Intercooler丨CDTI set-up with Pipercross Open Cone丨Forge Recric Valve 丨 Debaged 丨Corsa Indicator Surroundings |Full Rear Sunblinds | Leds Footwell Lightings丨

                            Comment


                            • #15
                              Originally posted by SilverSchoolBus View Post
                              Heads up for this post.

                              I don't do this sort of things myself as I leave it to my accountants. Just wondering, if my accountants fall into this sort of scam with my details, will I be out of pocket in anyways?
                              more a case of having the computer been put out of action in real terms

                              basically it was another way of trying to infect your machine, possibly to manipulate later ??
                              sigpic

                              Comment

                              Working...
                              X