HMRC continues to warn taxpayers to be aware of email phishing scams. Phishing emails are used by fraudsters to access recipients' valuable personal details, such as usernames and passwords. Fake email messages can appear to be genuine but clicking on a link from within the email can result in personal information being compromised and the possibility of computer viruses affecting your computer or smartphone. Taxpayers need to look out for emails that are from a similar address to HMRC such asrefunds@hmrc.org.uk. Fraudsters have also been known to falsify the 'from' address to look like a legitimate HMRC address for example @hmrc.gov.uk. HMRC also publishes online guidance that confirm emails from HMRC will never: You should also be wary of any emails that require urgent action, contain links to bogus websites or use a common greeting. Genuine emails from HMRC will usually be addressed to you personally. If you are unsure as to the validity of any email or communication from HMRC it should not be opened until the sender can be verified. Source: HM Revenue & Customs | 13-09-201813-09-2018
How to tell if a tax office email is fraudulent