New controls to protect taxpayers from HMRC ‘number spoofing’ calls introduced

Fraudsters will no longer be able to trick the public into thinking they owe HM Revenue and Customs (HMRC) money.

New defensive controls deployed by the tax authority to put an end to fraudster’s spoofing the tax authority’s most recognisable helpline numbers.

Fraudsters have increasingly mimicked legitimate HMRC helpline numbers (often beginning with 0300) to dupe taxpayers and steal money. Last year alone, HMRC received over 100,000 phone scam reports.

The ‘spoofing’ scam worked as taxpayers would receive calls and, on checking the numbers online, would find they appeared to belong to HMRC. This often led people to believe fake calls were real and enabled fraud.

The new controls, created in partnership with the telecommunications industry and Ofcom, will prevent spoofing of HMRC’s most used inbound helpline numbers and are the first to be used by a government department in the UK.

Criminals may still try and use less credible numbers to deploy their scams – but that means they will be easier to spot.

Financial Secretary to the Treasury, Jesse Norman MP, said:

This is a huge step forward in the fight against phone fraud.

HMRC’s new controls will help to protect thousands of hardworking taxpayers and their families from these heartless criminals.

Vigilance will always be important but this is a significant blow to the phone cheats.

Head of Action Fraud, Pauline Smith, said:

Phone calls are one of the top ways for fraudsters to make contact with their victims. Between April 2018 and March 2019, one in four phishing reports made to Action Fraud were about fraudulent phone calls.

It is encouraging to see that these newly developed controls by HMRChave already achieved a reduction in the number of calls spoofing genuine HMRC numbers. If you believe you have fallen victim to a fraudster, please report it to Action Fraud.

Since the controls were introduced in April this year, HMRC has reduced to zero the number of phone scams spoofing genuine inbound HMRC numbers. This has resulted in the tax authority already receiving 25% fewer scam reports against the previous month.

HMRC will continue to work with network providers to eradicate fraudulent numbers that are reported, and during the last 10 months has requested the removal of over 1,050 numbers from being used by scammers.

Criminals often target the elderly and vulnerable using HMRC’s brand as it is well known and adds credibility to a fraudster’s call, though this will now be significantly harder to do.

HMRC will only ever call you asking for payment on a debt that you are already aware of, either having received a letter about it, or after you’ve told us you owe some tax, for example through a Self Assessment return. Changes the department makes this month also mean you will never have to read aloud your card details to an operator.

If anyone is ever in doubt about who they are speaking to, check the number and end the call. You can contact HMRC using one of the helpline numbers or online services available from GOV.UK.

Statistics on HMRC phone scams

HMRC has seen an increasing number of phone scams against UK taxpayers:

• 2016 to 2017: 407 reports
• 2017 to 2018: 7,778 reports
• 2018 to 2019: 104,774 reports

How to spot a scam

Thanks to HMRC’s controls, scammers will now be forced to use much less credible looking numbers but you should still be vigilant as scammers may try spoof other numbers. Our advice for avoiding phone scams is:

• recognise the signs – genuine organisations like banks and HMRC will never contact you out of the blue to ask for your PIN, password or bank details
• stay safe – don’t give out private information, reply to text messages, download attachments or click on links in emails you weren’t expecting
• take action – forward details of suspicious calls claiming to be from HMRCto phishing@hmrc.gov.uk and texts to 60599, or contact Action Fraud on 0300 123 2040 or use their online fraud reporting tool if you suffer financial loss
• check GOV.UK for how to avoid and report scams and recognise genuine HMRC contact
• listen to an example of what a phone scam sounds like on Twitter
• if you think you have received an HMRC related phishing or bogus email or text message, you can check it against examples.