HMRC Confirms £47 Million Fraud via Personal Tax Accounts. 100,000 taxpayers’ information was leaked.

Who Can You Trust?

On 4 June 2025, HM Revenue & Customs (HMRC) announced that approximately 100,000 personal tax accounts (PTAs) were accessed without authorization. This breach, attributed to organized criminal groups, resulted in fraudulent claims totaling £47 million. The attackers exploited personal data obtained through phishing to manipulate PAYE tax records and divert refunds. HMRC has since secured the affected accounts, removed unauthorized changes, and is notifying impacted individuals.

🔍 Verify HMRC Account Activity

If you have not received a letter from HMRC, it's unlikely your account was affected. However, as a precaution:
To verify your account activity, you should sign in to your HMRC online account and go to the "Profile and Settings" section. There, review your sign-in details carefully to check for any unfamiliar or suspicious activity. If you have not received a letter from HMRC, it is unlikely that your account has been affected. However, it is still advisable to take this precaution.

If you do notice anything unusual or suspicious activity, you should change your password immediately.

Be Cautious of Scams

In light of this incident, be vigilant against potential scams. Criminals may impersonate HMRC to request personal information. Remember, HMRC will not ask for sensitive details via email, text, or phone calls. If you receive such communications, do not respond or click on any links. Please note: it is not impossible for scammers to obtain your personal information, and any further compromise of additional data may result in further damage, which is not always easily recoverable. While some contacts may sound genuine and seem to require extra attention, such issues must still be handled with caution. As tax matters are very important and cannot be ignored, it is understandable that taxpayers may worry about their tax responsibilities. This always raises one crucial question: when it comes to managing something as important as your taxes, who can you truly trust? Who can you trust?

Trusting Regulated Professionals

In the UK, only professionals regulated under the Financial Reporting Council (FRC) and compliant with Anti-Money Laundering (AML) regulations are authorized to act on behalf of clients in tax matters. These professionals, such as lawyers and accountants, are entrusted to handle sensitive financial information and, in certain circumstances, client funds. For example, when a lawyer handles a property transaction and deposits client monies in the lawyer’s specified bank account. Or accountants who handle clients’ trust and monies, such as tax refunds, in a separate bank account. UK banks allow lawyers and accountants to open a specific bank account for client funds—this is where the trust level lies. This level of trust is granted due to stringent regulatory oversight and adherence to ethical standards.

While some accountants may have the authority to manage client funds, many choose not to, prioritizing client autonomy and security. However, the key takeaway is that only regulated professionals are permitted to handle such responsibilities. Engaging with unregulated individuals or entities poses significant risks to your financial security.

Trust our accountant and tax professional at Elaga Accountancy, we are well experienced in all UK tax matters. Accountants at Elaga are AML supervised and regulated, registered HMRC tax agent, regulated agent under overseas entities verification of Companies House, regulated ACSP of Companies House, and practising accountant in the UK to the highest standard, who you can trust. We act on the best interest of our clients. Click below to learn how we can be of help to your tax matters.

Why This Matters

This incident underscores the importance of safeguarding your personal tax information and being cautious about who you entrust with your financial matters. Engaging with regulated professionals ensures that your affairs are managed with integrity, confidentiality, and in compliance with UK laws and regulations. 

***Contact us to learn more.

#HMRCSecurityAlert #DataProtection #TwoFactorAuthentication #AccountMonitoring #OnlineTaxFilingSafety #HMRCTaxAgent #ProfessionalAccountant #AMLCompliance #FRCRegulation #TaxRefundSecurity #OnlineAccountProtection