Criminals have hacked the online tax accounts of 100,000 taxpayers to claim GBP47 million of fraudulent repayments, HMRC has acknowledged. Most of the attacks were conducted by phishing using credentials obtained from non-HMRC sources to either set up new HMRC accounts or hijack existing ones, rather than by breaches of HMRC security. HMRC is writing to affected individuals by 25 June 2025, to explain how they can restore access to their online accounts.
Disclaimer
The information on this Blog is for general purposes only on matters of interest. The Company assumes no responsibility for errors or omissions in the Blog’s contents. Even if the Company takes every precaution to ensure the Blog’s content is current and accurate, errors can occur. Given the changing nature of laws, rules, and regulations, there may be delays, omissions, or inaccuracies in the information on the Blog. The Company is not responsible for errors, omissions, or results from using this information. The Company reserves the right to make additions, deletions, or modifications to the Blog’s contents without prior notice.
In no event shall the Company be liable for any special, direct, indirect, consequential, or incidental damages or any damages whatsoever, whether in an action of contract, negligence, or another tort, arising out of or in connection with the use of the Blog or the contents of the Blog. The Company does not warrant that the Blog is free of viruses or other harmful components.
Please read our disclaimer policy.
