Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

"HM Revenue & Customs" refund-tax@hmrc.gov.uk

DO NOT click on any links in these emails.

"HM Revenue & Customs" refund-tax@hmrc.gov.uk

Unread postby SlapHappy » Fri Dec 13, 2013 4:23 am

* 78.129.174.47 Check 78.129.174.47 at Senderbase.org Check 78.129.174.47 at Reputationauthority.org Rapidswitch Ltd n/a United Kingdom
13.12.10.10 Check 13.12.10.10 at Senderbase.org Check 13.12.10.10 at Reputationauthority.org Xerox Corporation Norwalk United States
203.137.13.250 Check 203.137.13.250 at Senderbase.org Check 203.137.13.250 at Reputationauthority.org Yahoo Japan Corporation n/a Japan
*Probable originating IP address

Return-Path: <refund-tax@hmrc.gov.uk>
Received: from mail.ezo.co.jp (mail.ezo.co.jp. [203.137.13.250])
by mx.google.com with ESMTPS id im7si10458860pbd.11.2013.12.10.10.35.25
for <multiple recipients>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Tue, 10 Dec 2013 10:35:36 -0800 (PST)
Received-SPF: neutral (google.com: 203.137.13.250 is neither permitted nor denied
by best guess record for domain of refund-tax@hmrc.gov.uk) client-ip=203.137.13.250;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 203.137.13.250 is neither permitted nor denied by best
guess record for domain of refund-tax@hmrc.gov.uk) smtp.mail=refund-tax@hmrc.gov.uk;
dmarc=fail (p=NONE dis=NONE) header.from=hmrc.gov.uk
Received: from User ([78.129.174.47])
(authenticated (0 bits))
by mail.ezo.co.jp (8.14.3/8.11.3) with ESMTP id rBAIYsBp008965;
Wed, 11 Dec 2013 03:34:56 +0900
Message-Id: <201312101834.rBAIYsBp008965@mail.ezo.co.jp>
Reply-To: <no-reply@hmrc.gov.uk>
From: "HM Revenue & Customs"<refund-tax@hmrc.gov.uk>
To: UK321712@hmrc.gov.co.uk
Subject: Submit Your Tax Refund
Date: Tue, 10 Dec 2013 18:35:23 -0000
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_00A2_01C2A9A6.4E359CAA"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

This is a multi-part message in MIME format.

------=_NextPart_000_00A2_01C2A9A6.4E359CAA
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit


Dear Applicant:

Following an upgrade of our computer systems and review of our records we have investigated your payments and latest tax returns over the last seven years
our calculations show you have made over payments of GBP 323.56
Due to the high volume of refunds due you must complete the online application, the telephone help line is unable to assist with this application.
In order to process your refund you will need to complete the attached application form.
Your refund may take up to 3 weeks to process please make sure you complete the form correctly.

To access your tax refund, please follow the steps below:

- download the Tax Refund Form attached to this email
- open it in a browser
- follow the instructions on your screen

Regards,
HM Revenue & Customs

Attachment: filename="Refund_Form.html" <<Phishing form.
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 102 guests