I took a screenshot of an supposedly HMRC based tax refund email some time ago with the intention of posting, but forgot all about it ! Here’s what I received.
If it hadn’t been for some badly placed HTML characters (such as
) then this email could well have looked like the real deal and encouraged you to rush in and click the link. It’s not until you long press the link (on a mobile device) and look at where it wants to send you to that you then are able to see it’s certainly not the tax office, but in fact a previously compromised site. Highly likely is the fact that this fake website is setup to harvest credentials - effectively stealing them to gain access to the real HMRC portal as an unsuspecting victim.