Paul Lewis
Millions of people receive emails which say they are due a tax refund. All they have to do is click on a link to submit their request for the money.
The amounts are modest – often just a couple of hundred pounds – and no doubt many people are clicking on the link. Don't. It is a fraud. If you hover your mouse pointer over the link you will see that it takes you to a website outside the UK – many end in .kr, which means South Korea. This address may well be a forwarding location to an untraceable and temporary internet café account.
Other emails come with an attachment for you to click on. The link or attachment may be used to download what is called a Trojan Horse on to your computer. That is a small program that monitors your activity and steals passwords and financial information. Or it may lead you to a website which asks for information from you and slowly leads you into a sticky trap where you end up giving away banking details or sending money in order to speed up the 'refund'. Which will, of course, never arrive.
HMRC never sends emails asking people to click for a refund. And if it does email you it will use your full name. But the safest rule is never to click on any link in an email which claims to be from a bank or government department. If it contains information that you think you want to follow up, make a separate phone call using a number on a paper document, such as a letter or statement.
For more information go to hmrc.gov.uk/security/index.htm
Written by Paul Lewis, this article first appeared in the November 2009 edition of Saga Magazine. Paul's opinions are his own and for general information only. Always seek independent financial advice.