Scam Tip Report #5203 - From: \"HM Revenue & Customs\"<noreply@hmrc.gov.uk> ; Subject: Tax Refund Confirmation

Scam ReporterScam Tips Received
No Name
Edinburgh, Edinburgh, United Kingdom
2012-09-19 11:22:17
Overpayment Scam
 +3 From: "HM Revenue & Customs"<noreply@hmrc.gov.uk> ; Subject: Tax Refund Confirmation 
 Scammer
  Information		Name:
User (static-58-108-163-82.optusnet.com.au [58.108.163.82] ) (authenticated sender enterpriselegal)		Email Address:
noreply@hmrc.gov.uk		Scam Website:
Tax refund scam (From: \"HM Revenue & Customs\") sent by User (static-58-108-163-82.optusnet.com.au [58.108.163.82] (may be forged)) (authenticated sender enterpriselegal) with ESMTP id q8JHPXqh003951 . link in email to a website that has a reputation for numerous phishing scams.

IP: 58.108.163.82 (Blacklisted)
ISP: Optus
Host Name: static-58-108-163-82.optusnet.com.au
Organization: OPTUS INTERNET - RETAIL
Country: Sydney, 02 New South Wales, Australia

Received: from mail06.syd.optusnet.com.au ([211.29.132.187]) by COL0-MC3-F4.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Wed, 19 Sep 2012 10:26:14 -0700
Received: from User (static-58-108-163-82.optusnet.com.au [58.108.163.82] (may be forged))
(authenticated sender enterpriselegal)
by mail06.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP id q8JHPXqh003951;
Thu, 20 Sep 2012 03:25:34 +1000
Message-Id: <201209191725.q8JHPXqh003951@mail06.syd.optusnet.com.au>
From: \"HM Revenue & Customs\"
Subject: Tax Refund Confirmation
Date: Thu, 20 Sep 2012 03:24:53 +1000
MIME-Version: 1.0
Content-Type: text/html;
charset=\"Windows-1251\"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: noreply@hmrc.gov.uk
X-OriginalArrivalTime: 19 Sep 2012 17:26:14.0841 (UTC) FILETIME=[DEEE9290:01CD968B]


Tax Refund Confirmation

After the last annual calculations of your fiscal activity, we have determined that you are eligible to receive a tax refund of 468.50 GBP. Please submit the tax refund request and click here by having your tax refund sent to your bank account in due time

Please Click

\"Get Started\" to have your tax refund sent to your bank account, your tax
refund will be sent to your bank account in due time take your time to go through the bank we have on our list




\">Get Started



Note : A refund can be delayed a variety of reasons, for example submitting invalid records
or applying after deadline.


Best Regards


HM Revenue & Customs
Follow Ups/Extra Information. Most recent is listed first.
 Anonymous   () Added the following extra information on :2017-05-31 06:20:54
 Scammer
  Information		Name:
Name Unknown		Email Address:
ernestcheung@optusnet.com.au
no-reply@hmrc.gov.uk - Regarding your recent communication HMRC : H44955 Dear xxxxxxxxxxxxxxxxx@yahoo.com, HM Revenue and Customs and HM Inspector of Taxes, New Tax Calculation ? We have received your tax calculation which shows you due a tax repayment of 344.17 GBP. ? We have determined that you are eligible to receive a tax refund of 344.17 GBP. Please submit the tax refund request ? Go to 'tax refund request' ? Note : A refund can be delayed a variety of reasons, for example submitting invalid records or applying after deadline. For more information about refund and payments, or to get in touch, go to our help pages. Submit your tax refund request, and complete the online form .
Online Banking Guarantee | Privacy Policy | Contact Us Barclays Bank PLC. Authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority (Financial Services Register number: 122702). Registered in England. Registered No. 1026167. Registered Office: 1 Churchill Place, London E14 5HP Security We never send emails that ask for personal or security details. If you recieve an email like this claiming to be from Barclays, you should not reply to it or follow and links it contains - just forward it to internetsecurity@barclays.co.uk and then delete it. Links in our emails will only take you to pages containing information about Barclays products, services or partners. If such a page is part of another company's website, that company's terms, conditions and privacy policies will apply.
Confidentiality This email is confidential, so it you have recieved it by mistake, or it isn't addressed to you, please delete it. It may also be privileged, which means you do not have to disclose it as part of legal proceedings.
Email & Cookies If you enable images or click on a link, you agree that you give Barclays permission to use cookies and similar technologies (which we collectively call cookies) through this email. Cookies help us to understand whether you have opened the email and how you have interacted with it. Cookies may be set on your computer or mobile device if you have already enabled images. Cookies will also be set if you click on any link within the email. Depending upon how your computer and software are configured, these technologies may operate if we are in your safe sender list or equivalent. Cookies help us to understand how you interact with our emails, which helps us to improve our future email communications. You can disable cookies in your Browser settings and you can prevent some of the other technologies from operating by not enabling images, or by removing Barclays from your safe sender list. To find out more about cookies and these technologies in general, please follow the link below. If your email settings have disabled links in this email, you can paste this address into your browser without enabling or accepting cookies: barclays.com/emailcookies.

Scam Email
Subject: - Regarding your recent communication
From: "no-reply@hmrc.gov.uk" return-path:
received-spf: pass (domain of optusnet.com.au designates 211.29.132.80 as permitted sender)
authentication-results: mta1337.mail.ne1.yahoo.com from=optusnet.com.au; domainkeys=neutral (no sig); from=optusnet.com.au; dkim=neutral (no sig)
received: from WIN-ILMQ6QCE3QR (CPE-124-188-6-223.dccz1.win.bigpond.net.au [124.188.6.223])(Authenticated sender: ernestcheung@optusnet.co...
content-type: text/plain
mime-version: 1.0
date: Wed, 31 May 2017 03:17:54 -0700
content-length: 26760
:
content-transfer-encoding: quoted-printable- This mail is in HTML. Some elements may be ommited in plain text. -
ft.basicimage(rotation=3d3)} .altova-rotate-right-textbox{filter: prog=
id: DXImageTransform.Microsoft.BasicImage(rotation=3D1)}page { margin-left:0.60in; margin-right:0.60in; margin-top:0.79in; ma=
rgin-bottom: 0.79in } @media print { br.altova-page-break { page-break-=
before: always; } div.altova-page-break { page-break-before: always; } }
hmrc : H44955
 Sam   (London, England, United Kingdom) Added the following extra information on :2013-09-21 05:55:35
 Scammer
  Information		Name:
Name Unknown
HMRC email "Click here" link takes the recipient to the following address, that is definitely not HMRC http://vgk.ma/xmlrpc/includes/hmrc/index.htm
 Sam   (London, England, United Kingdom) Added the following extra information on :2013-09-21 05:53:46
 Scammer
  Information		Name:
noreply@hmrevenue.com		Email Address:
noreply@hmrevenue.com
From: noreply@hmrevenue.com Subject: Your Tax Refund Notification. Date: Thu, 19 Sep 2013 06:53:56 -0400
We have determined that you are eligible to receive a tax refund of 868.40 GBP
Please Submit Your Tax Refund Request and allow us 7-10 Working days in order to process it.
CLICK HERE TO ACCEPT PAYMENT
Best Regards HM Revenue & Customs
************************************************************************************************************************************ The information you provide us is all non-sensitive and anonymous No part of it is handed down to any third party groups. It will be stored in our secure database for maximum of 7 days while we process the results of this nationwide survey.
Please do not reply to this message. For any inquiries, contact Customer Service.
 Got more information on this Scam/Scammer?
 Problems with this Report? Let us know

Since you’re here …
we have a small favour to ask. More people are visting Scamdex and Scamalot than ever but advertising revenues are falling fast and we have no 'product' to sell. And unlike many informational websites, we haven’t put up a paywall or membership barrier – we want to keep our site as open as we can. So you can see why we need to ask for your help. Scamdex/Scamalot websites takes a lot of time, money and hard work to keep running. We do this because we hate to see our fellow humans getting scammed out of their hard-earned money by low-lives.
Consider switching off your AdBlocker (if you use one) or contributing directly by one of the links below. Thank you for reading!
Ad Blocker Detected
Our website is made possible by displaying online advertisements to our visitors.
Please consider supporting us by disabling your ad blocker.
Thanks!
Scamdex

scamalot Scam Resources and Archive

Scam Information
Scamalot Resources
Other Information
PING