HMRC warns businesses over QR code VAT email scam
)
Posted: Thu 2nd May 2024
HM Revenue & Customs (HMRC) says it has identified a new email scam which encourages recipients to scan a QR code and share their personal details which could lead to money being stolen.
In a post on X, formerly Twitter, the government department said the fraudulent message is related to VAT. It warned that "HMRC will never ask you to submit personal information via a QR code. If you have received this email, do not engage, and report it to us."
The government's instructions for how to report suspicious phone calls, emails and text messages are outlined here.
HMRC does use QR codes in communications, but they will usually link to guidance on the official government website. HMRC will inform you if the QR code takes you anywhere else, and you will never be taken to a page where you have to input personal information.
The official guidance guidance says:
"When you are logged into your HMRC account, we may use QR codes to redirect you. For example, to take you to your bank's login page.
"If we're using QR codes in communications you'll be able to see them on the genuine HMRC contacts page.
"To help fight phishing scams, send any suspicious emails containing QR codes to phishing@hmrc.gov.uk then delete them."
QR codes have existed since the 1990s, but they reached major prominence in the UK during the coronavirus pandemic when they were used for a range of actions including ordering from menus in restaurants.
The number of scams involving a QR code reported to Action Fraud increased from 380 in 2022 to 651 in 2023.
Related resources
How to manage your business's cyber security
You might also like…
