HMRC calls on universities to protect students from tax scams
Warning from HMRC and Universities UK about tax related email scams.
New students starting university this year could be likely targets of a fresh wave of tax scams, HM Revenue & Customs (HMRC) warns. This comes as HMRC writes to UK universities advising them to warn new students about tax scams sent by fraudsters to steal students’ money and personal details.
Over 620,000 tax-related email scams were reported to HMRC last year – up by 20,000 on the previous year – including thousands of reports the department received about scam emails targeting students.
HMRC wants to ensure all students new to University this year are cyber aware for when repeat attacks hit their inboxes.
Fraudsters can use a range of methods to target students, most commonly by sending fake tax refunds using seemingly legitimate university email addresses (often ending in ‘ac.uk’) in order to avoid detection.
Depending on the details a criminal is able to obtain from a student, they could steal money, set up direct debits, make purchases for valuable goods on online sites or even take control of their computer – being able to access functions such as their webcam.
Jesse Norman MP, Financial Secretary to the Treasury, yesterday said:
“Cyber criminals use every means they can to steal money and personal data from students. That’s why HMRC are asking all UK universities to make sure students know how to protect themselves.
“HMRC are doing everything they can to clamp down on online fraud, but students and their families need to be vigilant, especially amid all the stresses and strains of going to university. I would urge University principals to take a lead in helping to protect students from these cyber thieves.”
Alistair Jarvis, Chief Executive at Universities UK, yesterday said:
“This action will help to raise awareness of the risks of tax scams. The security and welfare of students is always a top priority for universities. The message to students is to remain vigilant and question anything that seems unusual. We would encourage any student who fears their account may have been misused to speak to either their university support services, banks, or to the police.”
The letters to universities, authored by HMRC’s Head of Cyber Security, encourages colleges to raise awareness of tax-related scams at the start of this academic year and to integrate scam advice into guidance for new students if not already established.
HMRC advised university leaders students are “more likely to be taken in” by tax scams because students may have “had little or no interaction with the tax system”. This could make the offer of a tax refund from a scammer seem attractive, especially when on a budget.
Often HMRC-related email scams spoof the branding of GOV.UK and well-known organisations in an attempt to look authentic. The recipient’s name and email address may be included several times within the email itself.
As well as email tricks, phone scams have also been used increasingly by criminals in an attempt to threaten taxpayers into handing over cash – HMRC had over 100,000 reports of such scams last year, compared to 400 in 2016. HMRC has since introduced defensive controls with Ofcom and mobile networks to curtail these scams.
If students receive an email offering money sent to them by someone claiming to be HMRC and it seems too good to be true, then they should report it to email@example.com.
ActionFraud is the UK’s national fraud and cyber crime reporting centre.
We provide a central point of contact for information about fraud and cyber crime.
The easiest way to report fraud and cyber crime is by using our online reporting tool.Report
Latest News from
Man to appear in court following investigation into courier fraud involving 88-year-old woman09/04/2020 13:20:00
The court hearing follows an Essex Police investigation with assistance from Action Fraud.
Criminals target members of the public with NHS scam emails03/04/2020 16:05:00
Action Fraud has received 41 reports in the last two days.
Warning about false Danske bank messages31/03/2020 13:20:00
City of London Police hasn’t issued any alerts about fake messages from Danske Bank.
CTSI issues warning over COVID-19 'home-testing' scams25/03/2020 13:20:00
The Chartered Trading Standards Institute (CTSI) is warning the public not to open their doors to bogus healthcare workers claiming to be offering 'home-testing' for the COVID-19 Coronavirus.
Coronavirus-related fraud reports increase by 400% in March20/03/2020 13:05:00
Updated figures show there have been 105 reports to Action Fraud since 1 February 2020.
Man jailed for thousands of pounds worth of fraud following good work by Nottinghamshire Police and Action Fraud17/03/2020 11:10:00
A man has been jailed for thousands of pounds worth of fraud following good work by Nottinghamshire Police and Action Fraud.
Coronavirus scam costs victims over £800k in one month09/03/2020 10:20:00
New alert following identification of reports received by Action Fraud.
£100 million of fraud stopped through bank branch rapid response scheme04/03/2020 14:20:00
Over £100 million worth of fraud — often targeting vulnerable and elderly customers — has been prevented through the Banking Protocol, a UK-wide scheme that enables bank branch staff to spot potential fraud victims and request an immediate police response.