I have had an email from HMRC - could it be genuineNTV

Mary_Hartnell

The MSE system is reluctant to let me tell you about this but here goes:

I have had an email that looks official and technical sent to me in theory because I am a self assessment tax payer.

It wants me to download a zipped attachment.

the header tells me this amongst a whole lot of other stuff:
It is claiming to have been sent by Melba (at) hmrc . gov . uk
and the server seems to be www . scottishshop . org . uk

Do you think Melba might be Nellie's great granddaughter ?.

marleyboy

As far as I am aware, HMRC do not send e-mails in that manner. The usual giveaways is who the e-mail is specifically addressed to..."Dear valued Customer" does not cut it.

I advise you contact HMRC directly to clarify, better than downloading some dodgy zip file from a potentially unknown source.

cajef

HMRC will never contact you by email, do not open the attachment just delete the email.

http://www.hmrc.gov.uk/security/reporting.htm

booksurr

i trust yours is a rhetorical post?

is there really anyone left on the planet who has to ask about dodgy e mails rather than simply checking for the security advice/pages that banks, financial institutions and the govt (incl HMRC) provide on their own websites telling you what to do?

zygurat789

booksurr wrote: »

i trust yours is a rhetorical post?

is there really anyone left on the planet who has to ask about dodgy e mails rather than simply checking for the security advice/pages that banks, financial institutions and the govt (incl HMRC) provide on their own websites telling you what to do?

You must live in a very cloistered world, there are millions of people, let alone taxpayers who never have any direct contact with HMRC apart from the occassional P2. My own daughter for one, since I handle all her tax affairs, she had the presence of mind to ask me when she received the email.
Who reads security advice pages anyway they're about as understandable as T & Cs of an insurance policy.
Full marks to Mary for asking and whenever you feel anything may be a bit doubtful, Mary, stop and don't hesitate to ask someone you think may be more knowledgable on the subject than yourself.

purdyoaten

The worrying thing is that the website quoted IS a genuine website albeit the Scottish Grocer's federation. Bet they are happy!

antonic

Its a 100% fake.

HMRC dont normally communicate by email AND

the email address is wrong - HMRC email addresses are composed in a VERY specific way.

Which I am NOT going to reveal to all the spammers out there !.

comeandgo

I got the e mail today too but it is a scam. If you read the e mail, you will see it mentions toll-free phone number. Not language HMRC use. They never give anything free.

Mary_Hartnell

Thanks all - HMRC do infact send you an email is you make an error trying to register for their online self assessment.

I've sent it on to [EMAIL="phishing@hmrc.gsi.gov.uk"]phishing@hmrc.gsi.gov.uk[/EMAIL]

Who was the idiot who put the Toll free comment in it. Having read this expect to see a version two with an 0300 number.

Perhaps they just got my email address by coincidence.

zygurat789

Mary_Hartnell wrote: »

Thanks all - HMRC do infact send you an email is you make an error trying to register for their online self assessment.

I've sent it on to [EMAIL="phishing@hmrc.gsi.gov.uk"]phishing@hmrc.gsi.gov.uk[/EMAIL]

Who was the idiot who put the Toll free comment in it. Having read this expect to see a version two with an 0300 number.

Perhaps they just got my email address by coincidence.

No way. People use their email address to register and login to many sites.
If the site is in anyway dodgy expect your address to be sold, passed on and used.
It is a good idea to have several email addresses for various purposes.

Mary_Hartnell

To round off the saga.

Thank you for letting us know about the suspicious email you received containing a 'Zip file attachment'. We can confirm that this email is a scam, and was not issued by HMRC.

We strongly suggest that you do not open the 'Zip file' attachment as this contains malicious software. If you have opened the zip file, we recommend that you run your antivirus software as a matter of urgency, and change any online passwords.

Our specialist team will look into your submission and take the necessary action. We cannot always inform you of the outcome of these investigations but we do act on each submission we get.

Emails such as the one you received are issued in huge numbers and sent indiscriminately, which is why we recommend using up to date spam filters and other online protection.

HMRC takes online security very seriously and with law enforcement agencies works hard to identify and stop these attacks.

We also continuously monitor systems and customer records to guard against fraudulent activity. The methods fraudsters use to get the information they want is constantly changing so we provide regular updates on scams we know about. The main risk is theft of identity or online account access details. Please ensure that you keep your password and user ID secret and update them regularly.

Please report any suspicious activity to HMRC immediately.

HMRC publicises details of current scams on our website http://www.hmrc.gov.uk/security/index.htm.

Regards

HMRC Online Security Team