As the self-assessment tax return deadline looms this week, the pressure is on for millions of self-employed workers and business owners. Getting the paperwork in on time is an annual headache and that pressure may make them more susceptible to scams.
In the last year, HMRC has received 900,000 reports of suspicious phone calls, texts and emails most promising tax rebates. And they are becoming more sophisticated and increasingly convincing.
With a galling similarity to official communications using the same logo and seemingly official reference numbers emails from fraudsters ask recipients to click on a PDF attachment, which then requires them to fill in their bank details.
Calls from numbers which look identical to HMRC are also increasing. They can even include Government Gateway account numbers which makes them very easy to fall for, and infuriating for those who succumb.
We are human, so we can make mistakes. Even cautious people click on malicious attachments or links, says Jake Moore, a specialist at internet security company ESET. As the scams spread to social media, where many people may not be expecting to be contacted about tax details, and via direct messaging through Facebook and WhatsApp, there is one simple rule to remember - HMRC stresses it never uses any social media to offer a tax rebate, or ask for personal or financial information.
The scams do not always come in the enticing form of a promised rebate. Calls can be far more threatening, telling their target they owe money and will be arrested for tax fraud or have their bank account frozen within hours if they dont pay.
Be on the alert for automated calls. Ray Walsh from ProPrivacy.com particularly warns about accepting so-called robocalls, which aim to trick people into pressing a key on their keypad to connect to a caseworker to make a payment. Some have succeeded in adding charges to a victims phone bill simply by making them press a key.
Matthew Singleton, a Manchester-based finance professional, was targeted by scammers shortly before Christmas. He received a call from an 020 number and was taken through security. The scammer knew his name and address and told him he had underpaid his income tax.
They know what the trigger points are, and that if a call or email is out of the blue you can start to get flustered
When Singleton said it was a scam, he was told to Google HMRC and go to the contacts section of the site. The scammer said he would ring back from an 0300 number listed there. My phone then came up with this 0300 number the exact same number as on the HMRC website, says Singleton. He was told he could pay the amount owed more than 4,800 over the phone. There was no way I was doing that. I had not had any documentation. But I was told an arrest warrant would be issued within two hours of the call ending.
Singleton reported the scam to Action Fraud but believes HMRC could do more to increase awareness. When you Google HMRC, why cant it put a warning under its link to explain that this could happen? The safest thing is to warn people that even calls from recognised HMRC phone numbers may not be legitimate.
Joel Lewis, consumer policy manager at Age UK, agrees. I think HMRC should do a bit more to promote the fact these scams exist. We hear a lot about self-assessment deadlines, but not that you need to watch out because there are people pretending to be HMRC, he says.
The chief executive of cyber-security firm DynaRisk, Andrew Martin, says scammers can spoof any number new or old. In the case of text messages, scammers can alter the caller ID field to say HMRC. For phone calls, they alter it to show a number thats the same as another HMRC number.
The problem has led HMRC to work with the telecommunications industry and regulator Ofcom to prevent the cloning of genuine contacts. HMRC says it has seen a 94% reduction of phone scams spoofing genuine numbers since controls were introduced in April 2019. We have put in place pioneering new controls such as DNO [Do Not Originate] to prevent spoofing of the most used inbound helpline numbers, it says. During the past year, the teams work also instigated the removal of 1,921 unique numbers being used by scammers.
It says it is also working to raise awareness of scams via the media: We have a reporting channel which responded to nearly 200,000 calls from customers in the last year, and we maintain dedicated information on HMRC scams on the gov.uk educational pages.
Consumers are advised that if they receive a phone call from someone purporting to be from HMRC, they should end the call and phone back on a verified number. Check the HMRC website or use the number on a letter you have received in the past.
Be aware, however, that scammers can keep phone lines open, which means the original connection remains active even if the consumer has hung up. So always use a different phone to call back or wait 10 minutes if its the same line.
Crucially, HMRC will only contact customers due a refund by post. It will never be by phone, text or email, nor will consumers be asked for their PIN, password or bank details. Its advice is to watch out for spelling mistakes and grammatical errors in emails, as well as the use of threatening and urgent language such as you only have three days to reply.
Lewis says the tactics scammers use can be very effective and well-honed, and that it is important not to rush into anything. They know what the trigger points are for people and that if a call or email is out of the blue you can start to get flustered and make a rushed decision, rather than taking a moment to consider what it is you are being asked to do, he says. Dont respond immediately. There is never a need to do that. Ask for a second opinion from a family member or friend or someone else you trust.
Many phishing emails avoid using a persons name and opt for a generic greeting such as Dear customer. Check the from email address carefully, too. Some use random characters and can be easier to spot, but others may end in hmrc.gov.uk and appear more convincing.
Avoid opening the message and do not click on any links or PDF attachments.
Forward suspicious emails to email@example.com and texts to 60599. You can also contact Action Fraud on 0300 123 2040 Monday to Friday 8am to 8pm or use its online fraud reporting tool, particularly if you have lost money
View original post here:
How scammers take advantage of stressed-out taxpayers - The Guardian
- Security of online voting questioned | News, Sports, Jobs - The Daily Times - February 16th, 2020
- This may be the last piece I write: prominent Xi critic has internet cut after house arrest - The Guardian - February 16th, 2020
- An Alternative to Windows 7 - Budapest Business Journal - February 16th, 2020
- North Koreas Internet Use Surges, Thwarting Sanctions and Fueling Theft - The Indian Express - February 16th, 2020
- Microsoft Patch Tuesday fixes IE zeroday and 98 other flaws - We Live Security - February 16th, 2020
- 'More guidance and regulation': Zuckerberg requests government rules on 'what discourse should be allowed' - Washington Examiner - February 16th, 2020
- Internet of Things (IoT) Security Product Market: Development Factors and Investment Analysis by Leading Manufacturers 2018 2026 - TechNews.mobi - February 16th, 2020
- Our personal health history is too valuable to be harvested by the tech giants - The Guardian - February 16th, 2020
- Cyber Security Today The latest FBI Internet crime report, adware on the rise, attacks on Wi-Fi and more - IT World Canada - February 15th, 2020
- Indias proposed internet regulations can threaten privacy everywhere - The News International - February 15th, 2020
- Antivirus Is Not Enough in 2020: Here is Why - laprogressive.com - February 15th, 2020
- FBI: Cybercrime losses tripled over the last 5 years - We Live Security - February 15th, 2020
- AIoT Convergence of Artificial Intelligence with the Internet of Things - EnterpriseTalk - February 15th, 2020
- Indias proposed internet regulations could threaten privacy everywhere - The Verge - February 15th, 2020
- Global Internet of Things (IoT) Security Market Key Players, Share, Trend, Segmentation and Forecast to 2026: Cisco Systems, Intel Corporation, IBM... - February 15th, 2020
- Romance scammers stole $475m last year. Here's how to spot them - Verdict - February 15th, 2020
- Safer Internet Day 2020 Together for a better internet - Security Boulevard - February 14th, 2020
- Internet's safe-keepers forced to postpone crucial DNSSEC root key signing ceremony no, not a hacker attack, but because they can't open a safe - The... - February 14th, 2020
- Here's how to avoid becoming a victim of a tax scam - AZ Big Media - February 14th, 2020
- Will Weak Passwords Doom the Internet of Things (IoT)? - Security Intelligence - February 14th, 2020
- Bithumb Employee Found Guilty of Security Failings that Led to Hack - Cryptonews - February 14th, 2020
- Will your vote count? Ohio working to increase election security - WHIO - February 14th, 2020
- Perimeter 81 Introduces SASE Platform This latest offer is based on a partnership with investor and - Channel Futures - February 14th, 2020
- NHS Secure Boundary the next layer of cyber protection for the NHS - Digital Health - February 14th, 2020
- Global Internet of Things (IoT) Security Market Segmentation along with Regional Outlook, Competitive Strategies, Factors Contributing to Growth and... - February 14th, 2020
- North Koreas Internet Use Surges, Thwarting Sanctions and Fueling Theft - The New York Times - February 14th, 2020
- TechForce Aberdeen event to kick off Cyber Scotland Week - The Scotsman - February 14th, 2020
- Security Strategy: Moving Away From Tried and True - Security Boulevard - February 5th, 2020
- Internet Security Software Market investigated in the latest research - WhaTech Technology and Markets News - February 5th, 2020
- What Is Log Management, and Why Is It Important? - Security Boulevard - February 5th, 2020
- Latest Released 2020 Version Of Internet Security Market With Market Data Tables, Graphs, Figures and Pie Chat - TheLoop21 - February 5th, 2020
- Booter Boss Busted By Bacon Pizza Buy - Krebs on Security - February 5th, 2020
- Yet another Windows 10 fail as new update breaks the internet - heres how to fix it - TechRadar India - February 5th, 2020
- 'Formjacking' Is the New Internet Scam We Need to Watch Out For - q985online.com - February 5th, 2020
- Kiwis think benefits of the internet outweigh the negatives - SecurityBrief New Zealand - February 5th, 2020
- GAO: DHS and Agencies Must Work to Improve Cybersecurity - HSToday - February 5th, 2020
- Government to strengthen security of internet-connected products - GOV.UK - January 31st, 2020
- DigiCert Leads Initiative to Enhance EV SSL Certificates - Security Boulevard - January 31st, 2020
- eScan Internet Security Suite - Download - January 30th, 2020
- Internet Security - January 30th, 2020
- Best malware removal software of 2020: free and paid anti-malware tools and services - TechRadar - January 30th, 2020
- Government to strengthen security of internet-connected products - SecurityNewsDesk - January 30th, 2020
- IoT security: Your smart devices must have these three features to be secure - ZDNet - January 30th, 2020
- Millions of Wawa customers data breached selling on dark web - wobm.com - January 30th, 2020
- DigiCert CEO: Focus Security and Privacy on the Person - Infosecurity Magazine - January 30th, 2020
- CounterAct Cybersecurity Group Launches End-to-End Approach to Help MSPs Protect Their Businesses and Customers from Information Security Threats -... - January 30th, 2020
- The US Space Force Has a Rough Launch on the Internet - WIRED - January 30th, 2020
- Startup MGZN The only Arab company on eSecurity Planet's Top 18 Cybersecurity Startups 2020 is this one! - Startup MGZN - January 30th, 2020
- Bitdefender wants to protect your device for just over 7 dollars, but there's a catch - TechRadar - January 26th, 2020
- Here's the Top Cyber-Security Software You Need To Consider Downloading For 2020 - Grit Daily - January 26th, 2020
- Limited internet to be restored in Kashmir, no access to social media - Reuters - January 26th, 2020
- Analyzing AppFolio (NASDAQ:APPF) and Cyren (NASDAQ:CYRN) - Riverton Roll - January 26th, 2020
- The Rise of the Internet of Things | 2020-01-20 - Security Magazine - January 25th, 2020
- Protecting Websites from Magecart and Other In-Browser Threats - Security Boulevard - January 25th, 2020
- Off-campus wireless internet security on par with University - Kent Wired - January 25th, 2020
- Jeff Bezos Phone Hack Should Terrify Everyone - The New York Times - January 25th, 2020
- Limited internet to be restored in Kashmir, no access to social media - WSAU News - January 25th, 2020
- Cyber Security Today Kids clothes site hacked, a new phony email extortion scam and be careful with Internet Explorer - IT World Canada - January 25th, 2020
- Experts write to government on cyber fixes - Economic Times - January 25th, 2020
- Internet Security Software Market by Types, Applications, Countries and Forecasts to 2026 - Vital News 24 - January 24th, 2020
- An Open Source Effort to Encrypt the Internet of Things - WIRED - January 24th, 2020
- Local News Role of the internet in human trafficking to be highlighted at summit in SLO - KSBY San Luis Obispo News - January 24th, 2020
- Global Internet of Things (IoT) Security Market | By Component,By Type,By Application Area Dagoretti News - Dagoretti News - January 24th, 2020
- Internet Security Market to Reap Excessive Revenues by 2026 Dagoretti News - Dagoretti News - January 19th, 2020
- How to Secure Your Windows 7 PC in 2020 - How-To Geek - January 19th, 2020
- Security fears saw nearly half of Europe use the internet less during 2018 - The Brussels Times - January 19th, 2020
- Senate Passes Legislation to Help Boost and Secure the Internet of Things - Nextgov - January 19th, 2020
- Internet of Things presents the next frontier of cyberattacks - ITProPortal - January 19th, 2020
- Ooma Improves on Phone and Home Security with New Products for Cord Cutters - Cord Cutters News, LLC - January 19th, 2020
- Windows 7 computers will no longer be patched after today - Naked Security - January 19th, 2020
- How the Trump administration is secretly assisting Iranian protesters - Washington Examiner - January 19th, 2020
- Iowa results will be compiled over the internet, hacking threat aside - The Fulcrum - January 19th, 2020
- Interview with Jordan Blake on the potential of behavioural biometrics - The Paypers - January 19th, 2020
- Cyren (NASDAQ:CYRN) Stock Rating Lowered by Zacks Investment Research - Riverton Roll - January 19th, 2020
- Password Managers: What Are They & How to Use Them? - TechAcute - January 19th, 2020
- EZVIZ C6CN pan-and-tilt security camera review: Motion tracking keeps intruder in this camera's sights - TechHive - January 19th, 2020
- New Year, new gadgets? Five ways to keep your new devices safe from hackers, cyber attacks and malware - ZDNet - January 6th, 2020
- BlackBerry Collaborating with Amazon Web Services to Demonstrate Safe, Secure, and Intelligent Connected Vehicle Software Platform for In-Vehicle... - January 6th, 2020
- Internet of Things security firm Armis in talks to be acquired -media - Nasdaq - January 6th, 2020
- The Internet of Things: how safe are your smart devices? - Spectator.co.uk - January 6th, 2020