Share this content
8

Warning.

Phishing warning

Didn't find your answer?

Not a question but a heads-up.

Client received email from "GOV.UK services" saying his account had been temporarily locked and he needed to provide info.  The attached "letter" from HMRC was signed by Alison Walsh.  It linked to a copy of the gov.uk portal.

Had all the hallmarks of a scam ( client missed them of course).  Email address all caps, content not good english and caps used inappropriately.  Google seemed to have identified it a few hours later as a, possibly, unsafe site.

They are getting better visually but clients need to look a little closer to avoid being conned.

Replies (8)

Please login or register to join the discussion.

avatar
By SXGuy
13th Aug 2020 18:56

Easiest thing to do is just check the senders email address. Not look at what the label says, but the actual email address. Always a give away. Luckly these scammers haven't seemed to be able to work out how to spoof real addresses yet, which surprises me as it's quite easy if you know how.

Thanks (0)
Replying to SXGuy:
avatar
By whitevanman
13th Aug 2020 21:17

I cannot remember seeing anything in the address box than "GOV.UK.Service".
I considered it likely to be fake as usually it would be HMRC or some such "@gov.uk" since it purports to be in relation to a HMRC issue. The caps copies what appears on the home page of the Gov.uk website.

Thanks (0)
Replying to whitevanman:
Flag of the Soviet Union
By thevaliant
14th Aug 2020 02:54

On things like GMail, it often reports what the sender wants to report, but if you dig further into the header information you can usually see where it has really come from.

Thanks (0)
Replying to SXGuy:
Slim
By Slim
13th Aug 2020 22:03

I'm told from an expert it is possible to spoof the email address.

Edit. See you have already said that!

Thanks (0)
Replying to SXGuy:
avatar
By Rgab1947
20th Aug 2020 10:58

"which surprises me as it's quite easy if you know how"

Many of them are not very bright.

Thanks (0)
Replying to SXGuy:
By Husbandofstinky
20th Aug 2020 15:50

SXGuy wrote:

Easiest thing to do is just check the senders email address. Not look at what the label says, but the actual email address.

I had one sent in by a client this week which was fronted as sender:

'[email protected]'

Clicky on the address and it was some Hotmail account

They do seem to be getting better at this

Thanks (0)
avatar
By Roy Price
20th Aug 2020 10:37

I was caught by an apparent authentic email from a regular colleague even the text and context appeared realistic and was signed off by him. The give away was 'can you confirm the bank balance and I will send details to make the payment'; our system was to ask for a copy invoice and the nature of the transaction which is when it started to unravel - we also have two signatures for all bank payments. Also looking more closely the englich and punctuation was poor. You have to be on your guard.
HMRC have said they will not contact via email in the manner described they will ask you to log on to Personal Tax or Business Tax to pick up a message.

Thanks (0)
Share this content

Related posts