HMRC Targeted by £47 Million Fraud – What You Need to Know

A recent incident involving HMRC, meant organised criminals managed to fraudulently claim £47 million by exploiting stolen personal data.

What Happened?

Criminals used information gathered through phishing scams — not from HMRC systems — to either:

• Access existing PAYE accounts, or

• Set up new ones using the names of real individuals.

They then submitted fake tax refund claims. Around 100,000 accounts were affected, which is approximately 0.2% of the PAYE population.

Is Your Data Safe?

Yes. HMRC has confirmed that:

• This was not a hack of their systems.

• No individual taxpayers have lost money as a result.

• Affected accounts have been locked, and impacted individuals are being contacted.

If HMRC does contact you, it will be to reassure you and secure your account, not to ask for personal information.

What You Should Watch For

As ever - please be cautious of any unexpected emails, texts, or calls claiming to be from HMRC. These may be phishing attempts.

A Final Word

We’re monitoring this situation and will keep you updated if any action is needed on your part. If you have any questions or receive any suspicious communication, please do not hesitate to contact us.