UK tax office hit in €55.8m phishing scam targeting 100,000 taxpayers' online accounts
The attack, disclosed on Wednesday as officials from His Majesty's Revenue and Customs (HMRC) were before a House of Commons committee, occurred last December.
A notice published on the tax authority's website said the attack was 'an attempt to claim money from HMRC' and involved 'unauthorised access to some customers' online accounts'.
Recently appointed HMRC chief executive John-Paul Marks said the agency was still in the process of contacting some of those affected.
READ MORE
Angela MacDonald, HMRC deputy chief executive, said criminals had sought to 'masquerade' as taxpayers and had extracted £47 million from the public purse.
The MPs criticised HMRC for not disclosing the attack earlier, with chairwoman Dame Meg Hillier saying the committee 'would expect to get information about this – not have it emerge because of an announcement while you're in the committee room'.
HMRC said it had 'locked down affected accounts' and 'removed any incorrect information from tax records'.
Mr Marks, who has been in post since April, said the incident took place in December and had affected the accounts of about 100,000 pay-as-you-earn taxpayers.
He said affected taxpayers did not need to take any action and the situation was under control.
'This affected 0.2 per cent of the PAYE population, around 100,000 people, who we've written to and are writing to,' Mr Marks said, stressing that there had been 'no financial loss to those individuals'.
'This was organised-crime phishing for identity data out of HMRC systems,' he said, adding that the criminals had sought to use identity data from HMRC systems to create PAYE accounts to pay themselves a repayment or to access an existing account.
HMRC's fraud investigation service detected the attack and a criminal investigation was launched, with some arrests made last year, Mr Marks added.
Ms MacDonald, who has been in her current position since August 2020, acknowledged that £47 million was 'a lot of money and it's very unacceptable'. She added that HMRC had 'overall, in the last tax year, actually protected £1.9 billion worth of money which sought to be taken from us by attacks'.
Cleaning up the accounts and ensuring HMRC was 'talking to the genuine customer and not talking to the criminal' had been a 'challenge' and taken 'some time', Ms MacDonald said, stressing that no cyber breach had occurred.
Separately, several of HMRC's phone lines went down on Wednesday because of a system outage. Officials said the outage was not connected to the phishing attack.
The UK's most senior tax officials were before the House of Commons treasury select committee to discuss the agency's work and customer service performance, which has come under fire recently.
Last year, the National Audit Office, the public spending watchdog, said HMRC's customer service was 'in a declining spiral'. Funding pressures, job cuts and a push to cut costs – by encouraging taxpayers to manage their affairs online – had led to worse call-handling performance, it warned.
Speaking to the MPs, Mr Marks set out four key priorities for his leadership: closing the tax gap to bring in an extra £7.5 billion a year; improving customer service; modernising HMRC's systems, including 'improving our cyber resilience'; and boosting trust and engagement.
'Ultimately we want to be that modern trusted tax authority. We know trust is fundamental to good compliance, willingness to pay and confidence in the way we operate,' he added. – Copyright The Financial Times Limited 2025
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Irish Times
43 minutes ago
- Irish Times
Student fees: Minister gets barrage of complaints after suggesting €1,000 cut may not happen
More than 120 complaints were sent to Minister for Higher Education James Lawless after he signalled that cuts to third level fees seen in recent budgets may not happen this year. The Fianna Fáil politician suggested in a radio interview that a €1,000 cut to the €3,000 fee might not be repeated in Budget 2026 due to once-off cost of living measures being dropped due to to economic uncertainty. There was a public backlash after his remarks as well as division in the Coalition, with Fine Gael members angry about the controversy the issue generated for the Government. Records released by the Department of Further and Higher Education in response to a Freedom of Information request show some 125 complaints were sent on to Mr Lawless between June 29th and July 9th. READ MORE Of these, 35 were sent to Fine Gael politicians before they were forwarded to Mr Lawless. Thirty-three complaints were sent on to the Minister by the office of Tánaiste Simon Harris , a former minister for higher education. A further 23 complaints were sent on to Mr Lawless after they were received by Fianna Fáil politicians. During an interview on RTÉ radio on June 29th, Mr Lawless was asked about cuts in student fees. He replied: 'All of us in any walk of life play the hands we're dealt. If I don't have a cost of living package, I can't do those kind of measures that were done last year.' He pointed out other supports available and said he did 'absolutely intend to wind down the student contribution fee over the lifetime of the Government'. [ Third level fees row looks set to rumble on for a while Opens in new window ] More than 120 complaints were sent to Minister for Higher Education James Lawless following the comments. Photograph: Nick Bradshaw/ The Irish Times Many of the parents and students who complained wrote directly to Mr Lawless. One parent asked for the fee to be kept at €2,000. 'I do strongly feel that we are the squeezed middle in society, that work hard, pay [our] contributions and get on with things. But we are far from financially secure.' A student working to fund their education wrote that they were 'quite outraged' and that a return to higher fees 'may mean that I will not be able to enter my third year'. Student nurses were among those who sent some co-ordinated complaints. Irish Nurses and Midwives Organisation (INMO) general secretary Phil Ní Sheaghdha wrote that the 'mooted increase will have a detrimental impact on student nurses and midwives'. One of the complaints sent on to Mr Lawless by Mr Harris's office was from a parent with two children in third level education. 'Dear Mr Harris, I would like to tell you about my home tonight. My 21-year-old daughter started crying and apologised for the cost to us to send her to college,' they wrote. A complaint sent on to Mr Lawless from Taoiseach Micheál Martin's office was from a parent who said fee reductions of recent years had 'helped enormously to reduce the financial burden on our family'. Of the possible return to €3,000 fees, they said: 'I think Fianna Fáil has taken its eye off the ball.' A spokesman for Mr Lawless said the Minister was 'acutely aware of the financial pressures facing students and families' and he was 'currently reviewing pre-budget submissions'. He said Mr Lawless will enter budget negotiations 'seeking the strongest possible package of student supports, with a particular focus on those most in need, while also securing sustainable, permanent reforms rather than one-year interventions'. He also said Mr Lawless would be 'fighting hard for measures that reduce the cost of education'. The spokesman added that the Minister extended thanks to correspondents and he has offered to review 'individual cases to understand why they were not already availing of supports given that the current income threshold is at a historic high of €115,000. This means the majority of families in the State are now eligible for support.' A spokeswoman for the Taoiseach said: 'Government will be examining ways to support those in third level education in the upcoming budget. Matters related to the Budget will be negotiated over the coming weeks.'
Irish Times
2 hours ago
- Irish Times
Crash, part two: austerity bites and Cowen's Morning Ireland humiliation
In part two of a three-part series on Brian Cowen's ill-fated 2008-2011 government, Pat Leahy and Hugh Linehan continue the story. After the fateful 2008 decision to bail out Ireland's banks, Cowen and his Minister for Finance Brian Lenihan spent the next year struggling to shore up Ireland's worsening finances. Throughout 2009 and 2010 the mood in the country darkened as recession bit. Spending cuts and tax rises were introduced in a series of hair-shirt budgets. As a result, confidence in the government was already on the floor when Cowen made an infamous appearance on Morning Ireland in September 2009. But what did Cowen actually say in the interview, and what impact did it have?
Irish Times
2 hours ago
- Irish Times
‘Traffic-light' dashboard lets PwC in UK monitor office attendance
PwC has stepped up the monitoring of its UK employees' office attendance with a dashboard that allows senior partners to track pass swipes and WiFi connections, sparking concern from some staff. The increased scrutiny has triggered unease among some staff over how they are tracked, two people at the firm told the Financial Times. One senior staff member said they had 'lost count' of the number of colleagues at the accounting and consulting firm who had raised concerns. Another person said employees had sought more transparency as the firm began 'pushing hard' to increase attendance. PwC told its UK staff last September that it would monitor their office attendance like it did billable hours and require them to work in the office or at a client site at least three days a week. READ MORE Staff who breach the policy can face formal sanctions, with their performance evaluations and bonuses potentially affected, according to guidance for staff seen by the FT. [ Working from home 'trending upwards' despite moves to bring workers back to the office Opens in new window ] Staff show up as 'amber' on the dashboard, which first went live for supervisors in April, if they dip below 60 per cent office attendance, and 'red' if they fall below 40 per cent, according to the guidance. Attendance data can be accessed by business unit leaders and chief financial, administrative and people officers. Staff can also access their own data via the dashboard. The system traces laptop WiFi connections to check whether employees are working at client sites on the days they say they are, the policy documents state. The firm also cross-references this information with data from HR platform Workday and employees' time sheets. Staff who are unable to meet the in-office quota for reasons including sickness or family issues can seek allowances, said a person close to the firm. PwC's rival EY early last year started using swipe card data to monitor office entries, while Deloitte has maintained a more flexible policy. PwC UK's chief people officer, Phillippa O'Connor, told staff in a video in December that she was aware of concerns over whether monitoring workers' office attendance was consistent with the firm's mantra of 'trust' and 'empowerment', according to a transcript seen by the FT. Monitoring attendance 'aims to address persistent and deliberate non-compliance', O'Connor added in the video. 'It is not designed to penalise anyone for the occasional times when life events and unforeseen circumstances mean you aren't able to come to the office as planned.' PwC said there were 'clear benefits to in-person work' that have been 'borne out since adjusting our approach to hybrid working', adding: 'Our approach is consistent with other businesses and is recognised and accepted by the vast majority of our people.' 'We always listen to feedback and are committed to regular, clear and transparent communications about expectations,' the firm said, adding that it remains 'committed to flexibility', including early Friday finishes for six weeks over summer. 'Our dashboard ensures our people have easy access to their attendance data, so they can manage and plan their time in a way that works for them, our teams and our clients.' - Copyright The Financial Times Limited 2025
