Breadcrumb

  • Home
  • Fake UK VAT information update

Search form

Main navigation

  • Home

Fake UK VAT information update

Wednesday, 2 July, 2025 - 07:22

Below is hte actual text of a fraudulent approach which uses the UK's HM Revenue and Customs Value Added Tax office to obtain your personal and business information.

From: HMRC (actually, the from e-mail address in the example we have is info@kyonagomi.co.jp which is likely to be spoofed and the company that owns that domain probably has nothing to do with it. 

Subject: IMPORTANT - Update your VAT business

The body, when opened as text only (which is what everyone should always do) shows that in the HTML "pretty version" there is a logo which is linked to Amazon Web Services - we see this a lot. AWS is host to many, many fraudulent landing pages.

https://g718q86i.r.eu-west-2.awstrack. me/L0/https:%2F%2Fwww.gov.uk%2F/1/010b0195c6d9f9c6-95903814-f15f-44d0-8359-3fed41f2de2d-0…;

Sophos, one of the world's longest established internet threat finders immediately identifies this as a phishing threat. 

The message says 

HM Revenue & Customs


 You have New message about your VAT business details

The message is about your online business VAT information is not up to date.

Please follow the reference below to update your information now, otherwise your 
VAT profile will be automatically deleted from HMRC database.


 * Sign in to your Business Tax Account to update your VAT details.


For security reasons please follow the steps below to update your online profile 
now.

Confirm <https://*1000okrs*.com/sptfy/> * is to disable the link about which the spam says

For security reasons we cannot include any links on this page.

Why you got this email

You gave this contact email address when you signed up for Anti-Money Laundering Supervision.

[we didn't! In fact, our COUNTER-money laundering business predates HMRC's involvement in this field!]

This means we send you an email to let you know you have a new message in your account.

From HMRC Anti-Money Laundering Supervision

If you’re unsure an email is from HMRC:

 * Do not reply to it or click on any links
 * Report the suspicious email to HMRC - to find out how, go to GOV.UK and
   search for 'Avoid and report internet scams and phishing' 

 

 

 

Footer menu

  • Weekly Digest (opens in new tab)
  • Images attribution (opens in new tab)
  • Corporate, privacy, intellectual property and access (opens in new tab)
  • Advertising and Recommendations (opens in new tab)
  • Promote your business (opens in new tab)
  • Enquiries (opens in new tab)


 

BOT AND SCRAPER ACCESS DENIED

 


 

Built with Drupal     |     Hosted by Siteground     |     Template by Alaa Haddad     

Design by Vortex Centrum Limited    |     Some services provided by Google Workspace    

Posters and other merch by ProjectLXX   |   Privacy and security services by Surfshark and Firetrust. 


Nothing in this website is intended to be or shall be taken as legal advice. 

You should always seek advice from a practitioner experienced in this area. 


Everything on this website is copyright Nigel Morris-Cotterill and/or Vortex Centrum Limited for itself or one of its business units. No downloading, printing or other means of replicating or reusing is permitted. In particular, all bot access is denied and all scraping of content will result in the legal action set forth in the terms and conditions in this site. For legal, cookies and privacy see vortexcentrum.com.

Copyright 1999- © 2026 Vortex Centrum Limited - All rights reserved. Bot access denied.