Tax Refund Email **Scam**

[-Aura-]

Dear Applicant,

You are eligible to receive a tax refund of 665.24 GBP, after calculation of your fiscal activity. Your verification form will only be valid only for 24 hours and for verification your details you have the tax file number (TFN): 692553841 (See the tax privacy note in the Taxpayer's declaration on page 8 of your tax refund).

Please complete the individual tax refund 2011, "FORM SAT-19387" attached to this confidential message. After completing the form allow us 5-9 business days in order to process it.

Sincerely,
HM Revenue & Customs
[email protected]

Received: from server-ge-01.uzmanyardim.com (server-ge-01.uzmanyardim.com [188.138.16.188])

Host server-ge-01.uzmanyardim.com
Location DE DE, Germany
City -, - -
Organization BSB-Service GmbH
ISP intergenia AG
AS Number AS8972 PlusServer AG, Germany
Latitude 51°00'00" North
Longitude 9°00'00" East

 

[[TW]Fox]

You received a phishing email.

Want a badge or a sticker?

 

[Greenlizard0]

I'm intrigued, what badges do you get?

 

[-Aura-]

Looked real, I almost for a second had a look.

 

[Dist]

Scam emails? better keep this quiet before every bad guy figures out that it is possible to scam people on the internet.

 

[Azza]

Looked real, I almost for a second had a look.

Seriously...

 

[Rainmaker]

The rather poor grammar and duplicated words ('only be valid only', for example) give it away. Another good reason to ensure you maintain a decent standard of English.

 

[Redman]

Looked real, I almost for a second had a look.

HMRC have your email address then?

 

[Burnsy2023]

Looked real, I almost for a second had a look.

So you don't expect this sort of thing to come via regular mail?

 

[Castiel]

HMRC don't communicate via email, only by letter.

 

[arknor]

can people stop posting thesre stupid emails , people cont care, only the gullible get fooled and they get fooled regardless.

the odds are no one else on this forum will even recieve the email because they have apropriate spam/phising filters on by default

 

[singist]

HMRC don't communicate via email, only by letter.

They do but maybe only the confirmation email that I received confirming online return.

 

[Cosimo]

Yes, we've all seen spam, why don't you just keep it to yourself.

 

[Castiel]

They do but maybe only the confirmation email that I received confirming online return.

http://www.hmrc.gov.uk/security/examples.htm

I was referring to Tax rebates or requests for information.

 

[UberTiger]

How random, I came onto OC just now to post up a query about this and this was the first post in the GD forum.

Literally just an hour or two ago I received this same email in an account the gets virtually zero spam and this managed to work it's way directly into my inbox.

The really weird thing is the timing as I actually called HMRC early this week about a refund, I gave them lots of details over the phone but the result of the conversation was that I needed to snail mail a load of stuff in as they don't believe email is secure enough so they don't use it to correspond.

I very nearly entertained filling in the form until I realised they wanted so much personal info, also if they're paying me why do they need my bank details and online secure codes - lol, a bit of a give away.

Then I checked out the source code for the page and realised that whilst many of the images are hosted and hotlinked directly from the HMRC servers the visa and mastercards ones are not. Instead they link to bitterwallet and another site.

http://www.immortalbullies.com/logo_cc_visa_37x23.gif
http://www.bitterwallet.com/wp-content/uploads/2010/07/maestro-300x180.jpg

I consider myself relatively tech savy and aware of phishing scams, if I hadn't called HMRC myself this week I'd have dismissed it immediately, but the coincidence was so strong I very nearly started typing info.

The scams are getting better, viagra and Nigerian princes don't fool me, but mention a tax rebate and you have my attention