We have recently been advised by several of our clients of a scam VAT email claiming to be from HMRC.
An email, with gov.uk branding, is being sent to company email addresses, with the company name in the subject and main copy. It encourages the reader to scan a QR code to access their HMRC account.
It is often difficult to spot a scam email so please look out for a suspicious email address as on the example below, or a request to input personal information. HMRC advises:
‘HMRC uses QR codes in our letters and correspondence. The QR code will usually take you to guidance on GOV.UK. We will tell you if the QR code takes you anywhere else. You will never be taken to a page where you have to input personal information.
When you are logged into your HMRC account, we may use QR codes to redirect you. For example, to take you to your bank’s login page. If we’re using QR codes in communications you’ll be able to see them on the genuine HMRC contacts page.
To help fight phishing scams, send any suspicious emails containing QR codes to phishing@hmrc.gov.uk then delete them.
This is the type of fake email format to be aware of:
As with any email that you are unsure of, do not click on any links – these could be harmful to your computer and give an unwanted user access to your data.
Further help
Please see this guidance from HMRC: https://www.gov.uk/guidance/check-if-an-email-youve-received-from-hmrc-is-genuine