Our website uses cookies to enhance the visitor experience (what's a cookieCookies are small text files that are stored on your computer when you visit a website. They are mainly used as a way of improving the website functionalities or to provide more advanced statistical data.). Are you happy for us to use cookies during your visits?
Please note: continuing without making a choice equates to giving us your consent, which you can withdraw at any time via our cookies policy page.

1

Call us on 020 8424 9777

  • Start-up
  • Medium Business
  • Small Business
  • Large Business

HMRC warn of tax scams targeting university students

Newsletter issue - December 2018

HMRC has published a series of warnings that university students are being targeted by scammers with fake tax refunds in an effort to steal money and personal details.

The scammers are using seemingly legitimate university email addresses (for example '@uc.ac.uk') in order to avoid detection, and HMRC has received thousands of fraud reports from students at colleges across the UK.

This is the first time HMRC has seen a tax scam attack directly targeting university students in such high volumes.

HMRC never inform people about potential tax refunds by email, text or voicemail. Therefore, if someone does receive such a notification, they can be certain that it is a scam. People should not click on any links in these messages, and they should be forwarded to HMRC's phishing email address (phishing@hmrc.gsi.gov.uk).

HMRC is taking action encouraging all universities to raise awareness of scams and many have already begun taking action to warn their students of the risks. Often HMRC-related email scams spoof the branding of GOV.UK and well known credit cards in an attempt to look authentic. The recipient's name and email address may be included several times within the email itself.

Fraudulent emails and texts will regularly include links which take students to websites where their information can be stolen. Between April and September this year, HMRC requested that 7,500 of these phishing sites be deactivated. This compares to around 5,200 requests during the same period in 2017. Last year HMRC deactivated more than 20,000 fake HMRC websites, an increase of 29% on the previous year.

To avoid falling foul of the scams, people should:

  • avoid disclosing private information, such as personal data, bank account details, PIN numbers etc.;
  • not reply to text messages purporting to be from HMRC or other Government department;
  • not click on any links in unexpected emails or download any attachments.

Individuals who are the victim of an attempted fraud can contact Action Fraud on 0300 123 2040 or report the fraud using their online tool.

 

Registered to carry on audit work in the UK and Ireland and regulated for a range of investment business activities by the Institute of Chartered Accountants in England and Wales.