When asked by a reporter why he robbed banks the infamous American bank robber ‘Slick’ Willie Sutton replied, “Because that’s where the money is.” As our whole lives have gone digital, crime has gone digital. If we shop, work, communicate and entertain ourselves online, crime is bound to shift online too. 

Scammers are producing increasingly convincing emails and spoof websites, which typically ask for money to be transferred into a new account, promising tax rebates or even threatening arrest if they don’t pay the fictitious tax owed.

Common scams might begin with an email, text, or telephone call from a fraudster claiming to be from HMRC or your bank with a stark and terrifying message: your account has been compromised, move your money elsewhere. In reality, the only compromise on the account is the attempt by the caller to empty it.

One concerning development is that criminals are using HMRC’s public style guide, which contains information about the tax authority’s use of language and fonts. This makes it harder for taxpayers to spot fraudulent activity, although one of the best ways of spotting such attacks is still to look for errors and discrepancies in the style and presentation of communications.

The emotional response elicited by HMRC and bank communications is one of the reasons scams of this nature are so successful and popular among cybercriminals. Criminals know that people are fearful of HMRC’s powers and losing their money and this can prompt them to click a link without scrutinising it properly.

But just as a real bank would never ask customers to share their pin on the phone, the real HMRC never sends emails asking for a taxpayer’s details or payment. HMRC only sends letters regarding taxpayer specific information, never emails. HMRC will never contact taxpayers directly asking to pay money into a bank account. 

If someone texts, calls or emails claiming to be from HMRC, saying that you are due a tax refund or owe tax, or asks for bank or other personal details, it will almost certainly be a scam. Bearing in mind the looming tax deadline, it is important to be increasingly vigilant and act with caution. Do not give out personal information, download attachments or click on links in unexpected text messages or emails. 

Instead, log into your Personal Tax Account where you can safely check whether you owe any tax or make a repayment claim if you are due a refund.

If the caller claims to be from your bank and something does not seem right, or you feel under pressure to move money somewhere unfamiliar, hang-up. Banks will never call you to tell you to move your money to a ‘safe’ account. There is no such concept as a safe account; if someone uses the phrase then they are a fraudster. Hang up, or don’t engage with online messages. Then contact the bank immediately.

Stay safe.

Noel Guilford