editor
hiraethified
This one has apparently been causing concern
www.bleepingcomputer.com
Starts with a 'text rebate' SMS
As observed by BleepingComputer, the smishing scam starts with a text message informing the recipient that they are eligible for a tax rebate as they had paid "emergency tax" this year.
Smishing text message scam informs users they are eligible for a refund![]()
Source: BleepingComputer
You would think a user would know better not to click on a .com domain for accessing government services. However, some UK government services are offered via ".com" domains to the public.
One such example is householdresponse.com, which mimics the GOV.UK color scheme and UI so well it once had me fooled if it was a phishing domain.
Yet householdresponse.com is an entirely legitimate website used by the UK government to collect updates on household voter information from residents.
![www.bleepingcomputer.com](/forums/proxy.php?image=https%3A%2F%2Fwww.bleepstatic.com%2Fcontent%2Fhl-images%2F2020%2F11%2F07%2Fhmrc.png&hash=1690ad6405e13c2b8dc72a693ca1cd0b&return_error=1)
HMRC smishing tax scam targets UK banking customers
An advanced HMRC tax rebate scam has been targeting UK residents this week via text messages (SMS). The smishing campaign is concerning as it employs multiple HMRC phishing domains and tactics, with new domains being added every day as older ones get flagged by spam filters.