UK tax payers hit by phishing scam

A web site hosted in Denmark is impersonating the HMRC

Internet monitoring firm Websense is warning of a phishing attack against HM Revenue & Customs (HMRC), which runs the UK's tax system.

Emails have been spammed out promising a tax refund and apparently directing recipients to the HMRC web site via a link. However, the link leads to a very convincing fake site hosted in Denmark.

"Over the last annual calculations of your fiscal activity we have determined that you are eligible to receive a tax refund of £99.23," the email reads. " Please submit the tax refund request and allow us 3-6 days in order to process it."

Users are asked for their name and address and credit card details so that the refund can be deposited, but the details are harvested by the scammers to commit fraud.

Websense said that it is blocking the site for its customers, and that HMRC has been informed of the scam.

The bogus site is expected to cause confusion, since UK tax returns are due at the end of January.