From: \"HM Revenue & Customs\"<noreply@hmrc.gov.uk> ; Subject: Tax Refund Confirmation - Scamalot

Seen a Scammer? Report Them!

Seen a scammer? Been caught out? Let the world know so they don't get burned. Add information if you see one that's already been logged - scammers move quickly and change details often to avoid detection. Details you log here will be in major search engines within an hour or two.

Please Like, Share, Tweet etc. to spread the word.
  Scam type at Advanced Search      
Scam ReporterScam Tips Received
No Name
Edinburgh, Edinburgh, United Kingdom
2012-09-19 14:22:17
Overpayment Scam
 +3 From: "HM Revenue & Customs"<noreply@hmrc.gov.uk> ; Subject: Tax Refund Confirmation   
 Scammer
  Information		Name:
User (static-58-108-163-82.optusnet.com.au [58.108.163.82] ) (authenticated sender enterpriselegal)		Email Address:
noreply@hmrc.gov.uk		Scam Website:
Tax refund scam (From: \"HM Revenue & Customs\") sent by User (static-58-108-163-82.optusnet.com.au [58.108.163.82] (may be forged)) (authenticated sender enterpriselegal) with ESMTP id q8JHPXqh003951 . link in email to a website that has a reputation for numerous phishing scams.

IP: 58.108.163.82 (Blacklisted)
ISP: Optus
Host Name: static-58-108-163-82.optusnet.com.au
Organization: OPTUS INTERNET - RETAIL
Country: Sydney, 02 New South Wales, Australia

Received: from mail06.syd.optusnet.com.au ([211.29.132.187]) by COL0-MC3-F4.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
Wed, 19 Sep 2012 10:26:14 -0700
Received: from User (static-58-108-163-82.optusnet.com.au [58.108.163.82] (may be forged))
(authenticated sender enterpriselegal)
by mail06.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP id q8JHPXqh003951;
Thu, 20 Sep 2012 03:25:34 +1000
Message-Id: <201209191725.q8JHPXqh003951@mail06.syd.optusnet.com.au>
From: \"HM Revenue & Customs\"
Subject: Tax Refund Confirmation
Date: Thu, 20 Sep 2012 03:24:53 +1000
MIME-Version: 1.0
Content-Type: text/html;
charset=\"Windows-1251\"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: noreply@hmrc.gov.uk
X-OriginalArrivalTime: 19 Sep 2012 17:26:14.0841 (UTC) FILETIME=[DEEE9290:01CD968B]


Tax Refund Confirmation

After the last annual calculations of your fiscal activity, we have determined that you are eligible to receive a tax refund of 468.50 GBP. Please submit the tax refund request and click here by having your tax refund sent to your bank account in due time

Please Click

\"Get Started\" to have your tax refund sent to your bank account, your tax
refund will be sent to your bank account in due time take your time to go through the bank we have on our list




\">Get Started



Note : A refund can be delayed a variety of reasons, for example submitting invalid records
or applying after deadline.


Best Regards


HM Revenue & Customs
Follow Ups/Extra Information. Most recent is listed first.
 Anonymous   () Added the following extra information on :2017-05-31 09:20:54
 Scammer
  Information		Name:
Name Unknown		Email Address:
ernestcheung@optusnet.com.au
no-reply@hmrc.gov.uk - Regarding your recent communication HMRC : H44955 Dear xxxxxxxxxxxxxxxxx@yahoo.com, HM Revenue and Customs and HM Inspector of Taxes, New Tax Calculation ? We have received your tax calculation which shows you due a tax repayment of 344.17 GBP. ? We have determined that you are eligible to receive a tax refund of 344.17 GBP. Please submit the tax refund request ? Go to 'tax refund request' ? Note : A refund can be delayed a variety of reasons, for example submitting invalid records or applying after deadline. For more information about refund and payments, or to get in touch, go to our help pages. Submit your tax refund request, and complete the online form .
Online Banking Guarantee | Privacy Policy | Contact Us Barclays Bank PLC. Authorised by the Prudential Regulation Authority and regulated by the Financial Conduct Authority and the Prudential Regulation Authority (Financial Services Register number: 122702). Registered in England. Registered No. 1026167. Registered Office: 1 Churchill Place, London E14 5HP Security We never send emails that ask for personal or security details. If you recieve an email like this claiming to be from Barclays, you should not reply to it or follow and links it contains - just forward it to internetsecurity@barclays.co.uk and then delete it. Links in our emails will only take you to pages containing information about Barclays products, services or partners. If such a page is part of another company's website, that company's terms, conditions and privacy policies will apply.
Confidentiality This email is confidential, so it you have recieved it by mistake, or it isn't addressed to you, please delete it. It may also be privileged, which means you do not have to disclose it as part of legal proceedings.
Email & Cookies If you enable images or click on a link, you agree that you give Barclays permission to use cookies and similar technologies (which we collectively call cookies) through this email. Cookies help us to understand whether you have opened the email and how you have interacted with it. Cookies may be set on your computer or mobile device if you have already enabled images. Cookies will also be set if you click on any link within the email. Depending upon how your computer and software are configured, these technologies may operate if we are in your safe sender list or equivalent. Cookies help us to understand how you interact with our emails, which helps us to improve our future email communications. You can disable cookies in your Browser settings and you can prevent some of the other technologies from operating by not enabling images, or by removing Barclays from your safe sender list. To find out more about cookies and these technologies in general, please follow the link below. If your email settings have disabled links in this email, you can paste this address into your browser without enabling or accepting cookies: barclays.com/emailcookies.

Scam Email
Subject: - Regarding your recent communication
From: "no-reply@hmrc.gov.uk" return-path:
received-spf: pass (domain of optusnet.com.au designates 211.29.132.80 as permitted sender)
authentication-results: mta1337.mail.ne1.yahoo.com from=optusnet.com.au; domainkeys=neutral (no sig); from=optusnet.com.au; dkim=neutral (no sig)
received: from WIN-ILMQ6QCE3QR (CPE-124-188-6-223.dccz1.win.bigpond.net.au [124.188.6.223])(Authenticated sender: ernestcheung@optusnet.co...
content-type: text/plain
mime-version: 1.0
date: Wed, 31 May 2017 03:17:54 -0700
content-length: 26760
:
content-transfer-encoding: quoted-printable- This mail is in HTML. Some elements may be ommited in plain text. -
ft.basicimage(rotation=3d3)} .altova-rotate-right-textbox{filter: prog=
id: DXImageTransform.Microsoft.BasicImage(rotation=3D1)}page { margin-left:0.60in; margin-right:0.60in; margin-top:0.79in; ma=
rgin-bottom: 0.79in } @media print { br.altova-page-break { page-break-=
before: always; } div.altova-page-break { page-break-before: always; } }
hmrc : H44955
 Sam   (London, England, United Kingdom) Added the following extra information on :2013-09-21 08:55:35
 Scammer
  Information		Name:
Name Unknown
HMRC email "Click here" link takes the recipient to the following address, that is definitely not HMRC http://vgk.ma/xmlrpc/includes/hmrc/index.htm
 Sam   (London, England, United Kingdom) Added the following extra information on :2013-09-21 08:53:46
 Scammer
  Information		Name:
noreply@hmrevenue.com		Email Address:
noreply@hmrevenue.com
From: noreply@hmrevenue.com Subject: Your Tax Refund Notification. Date: Thu, 19 Sep 2013 06:53:56 -0400
We have determined that you are eligible to receive a tax refund of 868.40 GBP
Please Submit Your Tax Refund Request and allow us 7-10 Working days in order to process it.
CLICK HERE TO ACCEPT PAYMENT
Best Regards HM Revenue & Customs
************************************************************************************************************************************ The information you provide us is all non-sensitive and anonymous No part of it is handed down to any third party groups. It will be stored in our secure database for maximum of 7 days while we process the results of this nationwide survey.
Please do not reply to this message. For any inquiries, contact Customer Service.
 Got more information on this Scam/Scammer?
Add to Report
 Problems with this Report? (Spam/Legal/Abuse etc) ?
Report to Scamalot
Curious what information about you is out there? You may be surprised! | Reverse Email Lookup | Reverse Phone Lookup

Increase ad revenue 50-250% with Ezoic

scamalot Scam Resources and Archive

Scam Information
Scamalot Resources
Other Information 
54.80.209.254Array
(
    [CONTEXT_DOCUMENT_ROOT] => /home2/scamalot/public_html
    [CONTEXT_PREFIX] => 
    [DOCUMENT_ROOT] => /home2/scamalot/public_html
    [GATEWAY_INTERFACE] => CGI/1.1
    [HTTPS] => on
    [HTTP_ACCEPT] => text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
    [HTTP_ACCEPT_ENCODING] => x-gzip, gzip, deflate
    [HTTP_HOST] => www.scamalot.com
    [HTTP_USER_AGENT] => CCBot/2.0 (http://commoncrawl.org/faq/)
    [HTTP_X_HTTPS] => 1
    [PATH] => /bin:/usr/bin
    [PATH_INFO] => /5203
    [PATH_TRANSLATED] => /home2/scamalot/public_html/ScamTipReports
    [QUERY_STRING] => 
    [REDIRECT_STATUS] => 200
    [REMOTE_ADDR] => 54.80.209.254
    [REMOTE_PORT] => 51590
    [REQUEST_METHOD] => GET
    [REQUEST_SCHEME] => https
    [REQUEST_URI] => /ScamTipReports/5203
    [SCRIPT_FILENAME] => /home2/scamalot/public_html/ScamTipReports
    [SCRIPT_NAME] => /ScamTipReports
    [SCRIPT_URI] => https://www.scamalot.com/ScamTipReports/5203
    [SCRIPT_URL] => /ScamTipReports/5203
    [SERVER_ADDR] => 66.147.230.173
    [SERVER_ADMIN] => webmaster@scamalot.com
    [SERVER_NAME] => www.scamalot.com
    [SERVER_PORT] => 443
    [SERVER_PROTOCOL] => HTTP/1.0
    [SERVER_SIGNATURE] => 
    [SERVER_SOFTWARE] => Apache
    [SSL_TLS_SNI] => www.scamalot.com
    [TZ] => America/Sacramento
    [UNIQUE_ID] => We6JC0KT5osAACF@hLEAAAAM
    [PHP_SELF] => /ScamTipReports/5203
    [REQUEST_TIME_FLOAT] => 1508804875.33
    [REQUEST_TIME] => 1508804875
    [argv] => Array
        (
        )

    [argc] => 0
)