HMRC warns millions 'do not engage' after message and says 'we will never ask'

HMRC has warned over a new QR code scam circulating - as criminals attempt to steal details. The alert on Twitter/X from HMRC, the government tax department, today linked to a website containing the email address phishing@hmrc.gov.uk.

The HMRC account added: "HMRC will never send notifications of a tax rebate or ask you to disclose personal or payment information by email." HMRC does use QR codes in letters and correspondence, but the QR code will usually take the recipient to guidance on Gov.uk, and it urged people to "not engage" with the message.

HMRC says recipients will be told if the QR code takes them anywhere else, and they will never be taken to a page where they have to input personal information. HMRC says: "When you are logged into your HMRC account, we may use QR codes to redirect you.

READ MORE Martin Lewis issues Barclaycard warning over 'worrying under-the-radar change'

"For example, to take you to your bank’s login page. If we’re using QR codes in communications you’ll be able to see them on the genuine HMRC contacts page." The GOV.UK ID Check app is for proving your identity when you sign in to a government service with GOV.UK One Login.

To use the app, you must start on the government service you are trying to access. You’ll be guided to the app when it is time to use it. HMRC warned: "HMRC uses QR codes in our letters and correspondence. The QR code will usually take you to guidance on GOV.UK. We will tell you if the QR code takes you anywhere else.

"You will never be taken to a page where you have to input personal information. When you are logged into your HMRC account, we may use QR codes to redirect you. For example, to take you to your bank’s login page.

"If we’re using QR codes in communications you’ll be able to see them on the genuine HMRC contacts page. To help fight phishing scams, send any suspicious emails containing QR codes to phishing@hmrc.gov.uk then delete them."