
100,000 HMRC accounts hit by scammers
Newsletter issue – October 2025
HM Revenue and Customs (HMRC) revealed that it suffered a phishing attack that led to the compromise of around 100,000 personal tax accounts. The incident was described by HMRC officials as 'organised crime', targeting identity data outside HMRC systems.
Scammers managed to extract £47 million through fraudulent PAYE repayments. The breach involved individual PAYE accounts, not corporate ones, and accounts for 0.2% of the PAYE population.
Despite the breach, affected individuals have not suffered financial loss, according to HMRC. They stated that 'This was organised crime phishing for identity data outwith of HMRC systems, so stuff that banks and others will also unfortunately experience and then trying to use that data to create PAYE accounts to pay themselves a repayment and/or access an existing account' and stressed that this was 'not a cyber-attack, we have not been hacked, we have not had data extracted from us.'
The attack began last year and involved international jurisdictions. Arrests have been made as part of the investigation. HMRC locked down compromised accounts and has contacted or is in the process of contacting all affected taxpayers.
Book a Free, No Obligation Consultation
Take advantage of a free consultation to see how you can benefit from using Stanhope accountancy and advisory and find out the best way to deal with your tax, accounting and how to minimise your tax liabilities. Book now >
Get a Fixed Quote
We believe you should always be in control of your finances. For this reason we can offer many of our services on a fixed fee basis on agreed services >
Profitability Strategies
We can help you develop strategies to help your business grow without increasing costs specialized tax incentives to produce multiple benefits and help you increase your profit >
Your Business
Expert tax planning advice any size business tailored to you >