Get our money-saving tips and top offers direct to your inbox with the Mirror Money newsletter Sign up Thank you for subscribing We have more newsletters Show me See our privacy notice Invalid Email

Fraudulent emails purporting to be from the tax man have been sweeping the internet for years, promising rebates and refunds, that never existed in the first place.

The messages that have been known to take the form of emails, texts and even phone calls, allege that the person is owed money - to the tune of up to thousands.

In some cases, the caller claims an 'outstanding payment' is owed - and if not paid immediately - could lead to their arrest.

The threats may feel completely real, but HMRC, has on numerous occasions warned that it would never call customers 'out of the blue' to pay a tax bill or claim money back. In most cases it won't email you a refund, either.

We've taken a look at some of the big risks out there right now.

1. 'Pay your debt in iTunes vouchers'

In March, HMRC issued a warning to households over a phone scam that was conning people out of thousands of pounds.

HMRC said criminals were impersonating as tax collectors to target vulnerable and elderly people over the phone.

During the call itself, victims were told that they owed large amounts of money that could only be repaid through digital vouchers and gift cards, such as those used for Apple’s iTunes Store.

They were then told to go to a local shop, buy the vouchers and then read the redemption code out over the phone.

HMRC said the scammers frequently use intimidation to get what they want, threatening to seize the victim’s property or involve the police.

The conmen then sell these on or use the details to make high value purchases at the victim’s expense - which is then untraceable.

In a warning, HMRC said it would never request the settling of debt through such a method.

Angela MacDonald at HMRC, said: "These scammers are very confident, convincing and utterly ruthless. We don’t want to see anyone fall victim to this scam just before Christmas. That’s why we’re working closely with crime fighters to ensure taxpayers know how to avoid it.

“These scams often prey on vulnerable people. We urge people with elderly relatives to warn them about this scam and remind them that they should never trust anyone who phones them out of the blue and asks them to pay a tax bill."

2. HMRC refund text messages

(Image: Getty)

HMRC started a pilot project in April 2017 to combat fraudulent text messages after discovering how widespread it had become.

The aim was to stop and catch the criminals, before they even had the chance to reach people's phones.

The texts in question often promised false claims such as tax rebates - and many of them are still in circulation.

They often appear under a 'HMRC' thread on your phone and when opened, contain links that can harvest personal information or spread malware. This can in turn lead to identity fraud and the theft of people's savings.

In March, HMRC issued an alert, reminding people it will never get in touch over a tax refund by text message or by email.

HMRC's director of customer services, Angela MacDonald, said: "As email and website scams become less effective, fraudsters are increasingly turning to text messages to con taxpayers."

She continued: "We have made significant progress is cutting down these types of crime, but one of the most effective ways to tackle it is still to help the public spot the tell-tale signs of fraud."

Read more about HMRC scam texts and how to spot them, here .

3. Fake websites

Copycat websites have been known to clone online giant Amazon, major high street chains and even the passport office.

The list includes HMRC who have in the past alerted users to fake, digital self-assessment websites and forms.

Remember, with HMRC self-assessment tax returns, you need to register either on or offline at a tax office before you can pay.

You can do so online, here .

4. Create a "government gateway account"

Fraudsters are spreading like wildfire over email, claiming to be everything from the DVLA to Amazon, the TV Licence authority, and yes, HMRC.

In emails sent out to people at random, criminals are asking them to complete their tax returns online by clicking on links in messages. The user is then asked to create a "government gateway account", which asks for banking details.

Customers who receive an email with the subject line "#Refund Payment Confirmation Number" followed by an 11-digit number, are being warned to report and erase the message immediately.

This can done through Action Fraud here .

One type of fraudulent email currently in circulation reads: "We are sending this email to announce that after the last annual calculation of your fiscal activity we have determined that you are eligible to receive a tax return of £[sum]. In order to receive your tax refund, you need to create a Government Gateway account."

If you're unsure about what a phishing email looks like, you can see a few examples on the HMRC website here . If you're unsure as to whether the email is legitimate or not, you can read all about how and why HMRC would contact you here .

HMRC’s head of cyber security, Ed Tucker, said: "Phishing emails are a major focus for our Cyber Security Team.

"They’re more than just unwanted messages; they are a means by which criminals look to exploit members of the public and gain access to their personal and financial data. This in turn can lead to fraud and identity theft."

Find out more on HMRC scam emails, here .

Would HMRC contact me about a tax refund?

HM Revenue and Customs will never use texts or emails to:

Tell you about a tax rebate or penalty

Ask for personal or payment information

The tax body also said it would never put a figure on the alleged non-payment in the message itself.

If it does get in touch via phone, email or text, it will ask the customer to log into their account. If HMRC needs to contact you about anything confidential they'll write to you instead.

I've replied to an email: What should I do?

Contact the HMRC security team if you think you've given any personal information away in reply to a suspicious email or text.

Include brief details of what you disclosed (for example name, address, HMRC User ID, password) but don’t give your personal details in the email.

To contact HMRC's security team, email security.custcon@hmrc.gsi.gov.uk , or report any phishing activity to phishing@hmrc.gsi.gov.uk .

HMRC tax contact numbers

(Image: Peter Dazeley)

To get in touch with HMRC, select your concern here and follow the instructions .

Alternatively, you can call 0300 200 3600 anytime Monday to Friday between 8am and 8pm, 8am to 4pm on Saturdays and 9am to 5pm on Sundays.

Report a fraudulent HMRC email or text message

You can forward any suspicious emails to HMRC’s phishing team: phishing@hmrc.gsi.gov.uk .

If you receive a text, forward it on to 60599. Text messages will be charged at your network rate