HMRC system attack is a timely reminder to keep personal data safe

Taxpayers are being urged to check their online HMRC account after scammers attempted to defraud the tax authority using individuals' data and login details.

17 Jun 2025

Taxpayers are being urged to check their online HMRC account after scammers attempted to defraud the tax authority using individuals' data and login details.

The Low Incomes Tax Reform Group (LITRG) is also reminding people of the importance of being vigilant and taking care of personal data.

HMRC recently announced that criminals had targeted the online tax accounts of nearly 100,000 taxpayers to try to make false tax refund claims.

In some cases, HMRC have said that criminals gained people's login credentials and made use of existing online tax accounts. But, in others, they gained personal data that enabled them to set up new online tax accounts via the Government Gateway.

HMRC have locked down the compromised accounts as a precaution. They are writing to those affected with details on how they can regain access to their accounts.

Joanne Walker, Technical Officer at LITRG, said: 'HMRC have confirmed that they were the victim of online scammers who tried to defraud them of money using the details of individual taxpayers.

'While HMRC say this attack has not resulted in any tax-related financial loss for individual taxpayers, it is a timely reminder that fraud is an ongoing threat.'

Introducing our free Tax App

Mileage tracker, Expenses Logger - photograph & edit, Tax Calculators, Cloud Portal login to Sage, Xero, QuickBooks and more!

Download for free now:

or



BPU Chartered Accountants
BPU Chartered Accountants is the trading name of BPU Ltd Company number 3723948 registered in Wales. Registered to carry on audit work in the UK and regulated for a range of investment business activities by the Institute of Chartered Accountants in England and Wales.
BPU Financial Solutions Ltd
BPU Financial Solutions Ltd is an Appointed Representative of ValidPath Limited which is authorised and regulated by the Financial Conduct Authority. ValidPath Limited is entered on the Financial Services register (www.fca.org.uk/register) under reference 197107.
Cardiff
BPU Ltd
Radnor House
Cardiff
CF23 8AA
Llantwit Majo
BPU Ltd
The Counting House
Pound Field

Llantwit Major
Vale of Glamorgan
CF61 1DL