Key features of the letters

The letters, which claim to be from HMRC’s “Indv and Small Business Compliance” team, appear highly convincing but contain subtle fraud indicators.

They claim to be part of a “recent government initiative” to verify income to prevent tax evasion and fraud. In doing so, they ask business owners to submit important financial documents, such as bank statements, digital copies of directors’ identification documents, and either a passport or driving license.

These documents hold critical information that could easily be exploited for identity theft or financial fraud.

While the letters are designed to look official (featuring correct logos, fonts, and even links to government websites), suspicious details reveal their fraudulent nature. In particular, the email address provided for sending the requested documents – companies-review@hmrc-taxchecks.org – is not a legitimate HMRC address.

All official HMRC email addresses end with @hmrc.gov.uk. Additionally, HMRC rarely asks for sensitive information via email and prefers to communicate through official letters or its secure online portal.

How to spot a fake HMRC Letter

With scammers becoming increasingly sophisticated, it can be challenging to differentiate between real and fake HMRC communications. However, certain signs can help detect a fraudulent letter:

• Suspicious Email Addresses: Always verify the email address provided. A legitimate HMRC email will end in @hmrc.gov.uk.
• Request for Sensitive Information: HMRC rarely requests personal or financial details by email or post, especially without prior communication through official channels.
• Unexpected Correspondence: Be cautious if you receive a letter out of the blue. HMRC has a list of genuine letters they send, which can be cross-referenced on the government website.

Stay safe

If you or anyone in your business receives a suspicious letter, it is important to refrain from responding or providing any requested information.

If you’re a client of Shipleys, do contact us first. It’s important to report the letter to HMRC immediately. You can submit a report via the official HMRC website to ensure that your business is protected from identity theft or financial losses. Cases can also be reported to Action Fraud.

HMRC urges businesses to stay vigilant, especially as scammers become increasingly adept at mimicking official correspondence. By taking proactive steps to verify the authenticity of communications, business owners can protect themselves and their financial information from potential threats.

In summary, always verify any unexpected request from HMRC and report suspicious letters to the tax authority to avoid falling victim to fraud. If you have any concerns about communications you’ve received supposedly from HMRC, please get in touch with your Shipleys’ contact.

Specific advice should be obtained before taking action, or refraining from taking action, in relation to this summary. If you would like advice or further information, please speak to your usual Shipleys contact.

Copyright © Shipleys LLP 2024