HMRC warns of online self-assessment scam

Summary:If you file your taxes online, make sure you're the only one getting a refund

HM Revenue & Customs is warning taxpayers who file their self-assessment tax returns online to be especially wary of fraudsters after finding that passwords for the service are being hijacked.

According to HMRC, a "small number" of users have had their details and passwords compromised by scammers, who made fraudulent tax refund claims through the account, hoping to route the refunds into their own pockets.

Around two-thirds of self-assessment tax returns were filed online this year, with more than 5.7 million people using the system.

While HMRC refused to speculate on how the criminals got hold of users' passwords, phishing and key-logging viruses are potential avenues for the scammers.

"You've got to be careful with your password, careful with your personal information and careful with your IT," an HMRC spokesman said, adding: "This stuff is like gold dust to fraudsters."

However, HMRC said its systems are secure and that it is working with the individuals affected and the police.

It is not the first time HMRC has been targeted by fraudsters. Last month, the taxman warned of a phishing scam that claimed to come from the department, offering a refund. The phishing scam encouraged recipients to supply their bank or credit card details to collect the supposed tax refund, leaving them open to having their bank accounts drained and the possibility of ID theft.

Topics: IT Employment

About

Jo Best has been covering IT for the best part of a decade for publications including silicon.com, Guardian Government Computing and ZDNet in both London and Sydney.

zdnet_core.socialButton.googleLabel Contact Disclosure

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.