So on the 11th April I received an email from what I thought was HMRC, stating I have a tax refund of £230, which I clicked on the link to provide my bank details.
I phoned up HMRC just now to say what is happening with my refund and I can't believe they said it's not them and informed me to send an email to their phising department.
I'm going to go to my bank to see what I can do, they have my bank details!
Fake email stating from 'HMRC' gave them my bank details Watch
- 18-05-2016 14:22
Sorry this has happened to you, hopefully your bank can do something.
When I receive an email like this, I always double-check the email address of the sender, or originating email address. When you actually look closely, even those emails that look very authentic, the sending address is often some random hotmail or gmail account! Which HMRC for one wouldn't be using. I recently received an email purporting to be from my university's IT account, telling me I needed to log in via a link they provided, and change my password. The email looked genuine - they had copied the format and logos used, even down to a (fake) postal address and 'All rights reserved' at the very bottom of the email, but upon inspection of the sending address, it was some random guy's email address. So I deleted it. And sure enough, within a few hours the real IT department (using the correct @ac.uk addresses) had emailed round to say it was a phishing scam, trying to access students' login details and personal information.
I'm sure the above is not absolutely foolproof, but it will often flag up an email as suspicious even if it looks very professional. And you can always check with whichever 'organisation' is supposedly asking for your bank details...