HMRC QR code scam alert

HM Revenue & Customs (HMRC) is warning that a new VAT email scam is circulating

The scam encourages recipients to scan a QR code and enter personal details. 

If you receive such email, the HMRC advises not to engage and to report it to the HMRC phishing team by forwarding the email to phishing@hmrc.gov.uk.

While the HMRC uses QR codes in their official correspondence, they only do so to direct users to guidance. They will never ask you to submit personal information via a QR code. 

The National Cyber Security Centre have guidance on the immediate steps you can take to protect your organisation against phishing attacks.

They also offer further specific advice on QR-enabled fraud in their recent blog: QR codes - what’s the real risk.

First published 3 May 2024