Your browser isn't supported
It looks like you're using an old web browser. To get the most out of the site and to ensure guides display correctly, we suggest upgrading your browser now. Download the latest:

Welcome to the MSE Forums

We're home to a fantastic community of MoneySavers but anyone can post. Please exercise caution & report spam, illegal, offensive or libellous posts/messages: click "report" or email forumteam@.

Search
  • FIRST POST
    • MARZ12
    • By MARZ12 27th Jul 16, 8:30 PM
    • 3Posts
    • 0Thanks
    MARZ12
    Fake email????
    • #1
    • 27th Jul 16, 8:30 PM
    Fake email???? 27th Jul 16 at 8:30 PM
    following received but not sure if fake

    Date: Wed, 27 Jul 2016 11:06:11 +0000

    From: noreply@tax.service.gov.uk
    Subject: Your Income Tax estimate has changed

    GOV.UK GOV.UK
    HMRC Logo
    HM Revenue & Customs

    Income Tax estimates


    Your Income Tax estimate has changed.

    Sign in to the 'Check your Income Tax' service to see your new estimated taxable income, income tax and tax code.

    A link isn't included for security reasons.

    Why you got this email

    You chose to receive email notifications about your Income Tax.

    We have started to send you these emails when your Income Tax estimate has changed.

    From HMRC Check your Income Tax service

    To manage your paperless notifications - sign in to your HMRC online account.
    If you are unsure an email is from HMRC:
    Do not reply to it or click on any links
    Forward it to phishing@hmrc.gsi.gov.uk
    Crown Logo

    2016 Microsoft Terms Privacy & cookies Developers English (United Kingdom)
Page 1
    • TadleyBaggie
    • By TadleyBaggie 27th Jul 16, 8:40 PM
    • 2,904 Posts
    • 2,214 Thanks
    TadleyBaggie
    • #2
    • 27th Jul 16, 8:40 PM
    • #2
    • 27th Jul 16, 8:40 PM
    You chose to receive email notifications about your Income Tax.
    Originally posted by MARZ12
    Well did you?

    If there are no links and it just instructs you to go to the official HMRC site, then it either a real HMRC email or the worst phishing email ever.
    • MARZ12
    • By MARZ12 27th Jul 16, 9:21 PM
    • 3 Posts
    • 0 Thanks
    MARZ12
    • #3
    • 27th Jul 16, 9:21 PM
    • #3
    • 27th Jul 16, 9:21 PM
    I have now phoned HMRC and said it was fake.

    BTW I come from Tadley.
    • agrinnall
    • By agrinnall 27th Jul 16, 9:28 PM
    • 21,020 Posts
    • 16,805 Thanks
    agrinnall
    • #4
    • 27th Jul 16, 9:28 PM
    • #4
    • 27th Jul 16, 9:28 PM
    It seems a bit of a pointless effort but as TadlegBaggie says if you didn't ask HMRC to email you then they won't, so it's an obvious fake. In fact HMRC send very few emails so even if you gad asked them to email you it could easily still be a fake.
    • kimplus8
    • By kimplus8 27th Jul 16, 9:30 PM
    • 706 Posts
    • 2,161 Thanks
    kimplus8
    • #5
    • 27th Jul 16, 9:30 PM
    • #5
    • 27th Jul 16, 9:30 PM
    I do t see what the sender has gained from this at all. It tells you to go to Harv website and contains no links- must be the worst phishing email ever!
    Dave Ramsey and Martin Lewis are my Money Saving Heros.
    • forgotmyname
    • By forgotmyname 27th Jul 16, 10:13 PM
    • 27,603 Posts
    • 11,174 Thanks
    forgotmyname
    • #6
    • 27th Jul 16, 10:13 PM
    • #6
    • 27th Jul 16, 10:13 PM
    Whats the senders details in the header?

    I use Thunderbird for my email and one pet hate was it only showed the senders ID which could be changed easily. I installed an addon to see the actual senders address. Yep that can still be faked but many lazy spammers dont.

    Correct email address and no clickable links then i think its probably real.
    Last edited by forgotmyname; 27-07-2016 at 10:16 PM.
    Punctuation, Spelling and Grammar will be used sparingly. Due to rising costs of inflation.

    My contribution to MSE. Other contributions will only be used if they cost me nothing.

    Due to me being a tight git.
    • The Goose
    • By The Goose 5th Mar 18, 2:46 PM
    • 42 Posts
    • 146 Thanks
    The Goose
    • #7
    • 5th Mar 18, 2:46 PM
    • #7
    • 5th Mar 18, 2:46 PM
    I have just had one of these emails, headed "You have a tax code change."

    No clickable links, apparently correct email address for the sender (noreply@tax.service.gov.uk) and telling me I have a tax code change and to sign in using Government Gateway and check my details.

    Well I've signed in, I've got no messages, there's nothing about a tax code change. I've looked everywhere.

    I phoned HMRC up and after an extremely long wait got through to somebody who said it must be a phishing email as they haven't sent anything out.

    Most bizarre. What's the point? Except it's just wasted a whole load of my time whilst I searched through the website
    • ChuckMountain
    • By ChuckMountain 5th Mar 18, 5:55 PM
    • 177 Posts
    • 64 Thanks
    ChuckMountain
    • #8
    • 5th Mar 18, 5:55 PM
    • #8
    • 5th Mar 18, 5:55 PM
    I think this is a case of the left hand not knowing what the right is doing.

    I suspect its a case of HMRC call handlers not being aware of these emails as they don't relate to a specific message on your online account and therefore in the absence of anything else will "confirm" them as phishing.

    However looking at the contents of the email and its headers, there is nothing in there to suggest it is trying to point people at another site. All image links point back to HRMC, there is one identifier image link and the headers all point to HMRC or mailgun.

    As others have put its a very bad attempt at a phishing email as there is no bait ....

    I had the email on the 14th Feb and I thought I had a minor change on my numbers, but given there is no history of changes or message can't prove that now. It may be an accidental release by a developer but I don't think its fake.
    • The Goose
    • By The Goose 5th Mar 18, 6:31 PM
    • 42 Posts
    • 146 Thanks
    The Goose
    • #9
    • 5th Mar 18, 6:31 PM
    • #9
    • 5th Mar 18, 6:31 PM
    Yes, thanks, I think that must be right.
    • leohornbill
    • By leohornbill 27th Mar 18, 9:54 AM
    • 3 Posts
    • 0 Thanks
    leohornbill
    Fake websites?
    I have just had exactly the same email and am equally mystified by the lack of the usual link. However, it does not ring true as I recently did a self assessment and nothing has changed.


    Having Googled it there seem to be quite a few websites that purport to check your tax, not all HMRC, and I suspect they are hoping a proportion of people following up the instruction to check their tax will use a fake HMRC website and divulge all their personal details once they do so.


    It raises the question as to how you can ever be assured that a website you are logging on to is genuine? The scammers are getting cleverer at faking this all the time.
    • ChuckMountain
    • By ChuckMountain 27th Mar 18, 1:19 PM
    • 177 Posts
    • 64 Thanks
    ChuckMountain
    Did you check the headers of the email to see the origins?

    Mine was from HMRC and I don't notice any obvious changes or messages.

    The fake HMRC websites generally do a tax submission on your behalf by becoming your agent and then taking their extortion cut.
    • 66z
    • By 66z 17th Apr 18, 9:06 PM
    • 36 Posts
    • 5 Thanks
    66z
    Just gone one myself as well -- it looks genuine, headers don't reveal anything unusual for a casual viewer, no links BUT it has email address I have never given to HMRC and which is not associated with any of my Government Gateway accounts (happen to have three).

    The subject says "File your Self Assessment return" which I already did.

    Maybe they found my email somewhere in relation to my services and checking against their database assumed I haven't done self-assessment? But why would they say then that I have an account at all?

    This is so bizarre.
    • ChuckMountain
    • By ChuckMountain 17th Apr 18, 9:12 PM
    • 177 Posts
    • 64 Thanks
    ChuckMountain
    I had one on the 7th April for the new tax year entitled the same but why would it be spam

    Part quote

    "Why you got this email
    You chose to get paperless notifications instead of letters by post.

    This means we send you an email to let you know you have a new message in your account."
    • 66z
    • By 66z 17th Apr 18, 9:15 PM
    • 36 Posts
    • 5 Thanks
    66z
    OK, actually got through to it!

    It's not in the Government Gateway portal but following further through to Self-Assessment section in particular, where you log in again with extra security.

    So it is genuine, at least in my case.

    The only thing that I still don't get is the email address which is not associated with that account.. But maybe I have given it as an alternate one? But then why didn't they use my login address?
    • thermalsocks
    • By thermalsocks 27th Jun 18, 1:08 PM
    • 2 Posts
    • 0 Thanks
    thermalsocks
    tax-service-gov.uk
    Received an email from this domain tax-service-gov.uk but with a name of Amanda Right ... the title was pay slips ...

    The email contained a word document.

    I did not download or open this document.

    I don't get payslips as I have retired and the domain tax-service-gov.uk is registered to someone but I can't see who as the whois database is down or blocked due to GDPR but there is no accessible website.

    I would expect that the .doc file contains a virus, worm or keylogger so just to warn anyone else... DON'T OPEN the file in Word if your get any emails from anyone at tax-service-gov.uk.
    • July68
    • By July68 27th Jun 18, 6:14 PM
    • 1 Posts
    • 0 Thanks
    July68
    I received the same email from Amanda Right, but I mistakenly tried to download the document, fortunately it did not download. Is there a way I can check if my iphone has been hacked ?
    Thanks
Welcome to our new Forum!

Our aim is to save you money quickly and easily. We hope you like it!

Forum Team Contact us

Live Stats

4,595Posts Today

5,215Users online

Martin's Twitter