A new scam email is circulating, falsely claiming to be from HMRC and requesting recipients to ‘submit your VAT Annual Supervisory Return as part of AML supervision.’ Please remain vigilant.
The request urges you to check all sections of the return are completed, provide company information if applicable and confirm that your Agent Services Account (ASA) remains active. The email includes a link urging you to click to begin your submission – do not engage. Always exercise caution with emails that request you to follow links.
The email may appear legitimate, closely resembling the official gov.uk format, but it is actually sent from a fake email address ending in @tax-services-uk.digital. Scammers often use email addresses that appear similar to official domains to deceive recipients into revealing personal or financial information.
Important indicators to help spot fraudulent emails
- Inconsistent email addresses – Checking the sender’s address often reveals that the email does not originate from a legitimate gov.uk domain.
- Misleading hyperlinks – The links provided do not direct users to an official gov.uk website. Always hover over links to verify their destination before clicking.
- Requests for sensitive information – HMRC and other government bodies will never ask for passwords, bank details, or other personal data via email.
- Unexpected attachments or links – Be cautious of any email urging you to open an attachment or click a link.
- Lack of official branding – Genuine HMRC emails always include the official logo and a footer outlining confidentiality, scam warnings, and phishing advice.
- Spelling and grammar errors – Poorly written emails with noticeable mistakes are a sign that the message is not from a legitimate source.
HMRC remind taxpayers to be vigilant to communication purporting to be from them, emphasising that customers should never give out private information (such as bank details or passwords), reply to text messages, download attachments or click on any links in emails if they are uncertain as to their authenticity.
Scam emails can be reported to HMRC by forwarding the email to phishing@hmrc.gov.uk.