Page 1 of 1

fucking scammers

PostPosted: Mon Feb 10, 2014 5:46 pm
by aliensurfer
kind of a new one at work, luckily most people seem clued up - it's the standard type of thing, an alleged tax refund. all laid out correctly it seems on the main page, and the email is well hidden - whomever is doing it does have it showing a direct.gov.uk email address - and unlike normal scam ones where hovering over the email address will show the correct one, this doesn't. There are a few warning bells on the email at first, if you are aware of these things. I am sure you have all seen it, but this seems an update. The text is here;

DIRECT GOV
LOCAL OFFICE No. 158432
TAX CREDIT OFFICER: Joy M Brown
COUNCIL TAX REFUND ID NUMBER: 2234124578 REFUND AMOUNT: 318.23 GBP

Dear Applicant,

Unless expressly authorised by us, any further dissemination or distribution of this email or its attachments is prohibited.

I am sending this email to announce: After the last annual calculation of your fiscal activity we have determined that you are eligible to receive a tax refund of 318.23 GBP

The dispute follows miscalculations of Pay As You Earn (PAYE) liabilities last year, which DIRECT GOV originally also denied when reported in this space but later admitted affected millions of people. You can now reclaim your over paid tax now by complete the tax return form attached to this message.
After completing the form, please submit the form by clicking the 'Refund Council Tax Now !' button on form and allow us 5-9 business days in order to process it.

Our head office address can be found on our web site at DIRECT GOV

Joy M Brown
DIRECT GOV Credit Office
Preston
COUNCIL TAX REFUND ID: UK2234124578-HMRC

DIRECT GOV denies profiting from tax refund delays which leading accountants claim are becoming more widespread and make taxpayers wait months to get back what they are due.

Copyright 2014, DIRECT GOV UK All rights reserved.

There is also an HTMl attachment, where it asks for all your bank details etc. It stores itself locally and is a PHP form going off to a .Ru address. Playing around with it (I like to at times fill these in with hideous abusive messages), I cannot get it to take a fake credit card number so cannot send off my form full of expletives to them.

Just raising it here in case you know of people who are not so computer literate / know what to look for, are elderly etc. Especially in the economic 'crisis' we are in, there will be some people who believe it.