UK Tax Refund Phishing Scams Decline in 2025
▼ Summary
– Phishing reports impersonating HMRC are declining overall, based on a study by Bridewell using data from January 2023 to June 2025.
– The data was collected via a Freedom of Information request and published on September 10, 2025.
– Total phishing reports dropped to 41,202 in the first half of 2025, down from 102,226 in 2024 and 152,995 in 2023.
– Email-based phishing attempts decreased significantly, with 38,012 reports in early 2025 compared to 96,252 in 2024 and 148,909 in 2023.
– SMS-based phishing attempts are increasing, with 3,190 reports in early 2025, accounting for a large portion of the 2024 and 2023 totals.
Reports of phishing scams impersonating HM Revenue & Customs (HMRC) have shown a significant decline during the first half of 2025, according to recent data analysis. This encouraging trend suggests that public awareness and improved security measures may be having a positive impact, though experts caution that vigilance remains essential.
A cybersecurity firm specializing in critical infrastructure protection gathered this information through a Freedom of Information request, examining reports submitted by individuals targeted by fraudulent HMRC communications between early 2023 and mid-2025. The findings, released in early September, highlight a clear reduction in both email and SMS-based impersonation attempts over the observed period.
During the first six months of this year, a total of 41,202 phishing reports were recorded. This marks a substantial drop from the 102,226 incidents reported throughout 2024 and an even more dramatic decrease from the 152,995 cases identified in 2023. If this pattern holds for the remainder of the year, the annual total could be nearly 60% lower than the previous year’s figures.
Email-based scams in particular have seen the most notable decline. From January to June 2025, there were 38,012 reports linked to fraudulent emails, down sharply from 96,252 in 2024 and 148,909 in 2023. This suggests that filtering technologies and user education around suspicious emails are proving effective.
In contrast, SMS phishing, or smishing, attempts have actually increased. The first half of 2025 saw 3,190 reported incidents, which already accounts for nearly two-thirds of the total SMS-based reports from the previous full year. This upward movement indicates that while email scams may be receding, fraudsters are shifting their tactics toward mobile-based attacks, which some users may find harder to identify.
The overall decrease in HMRC-related phishing is a positive development, but the rise in SMS fraud underscores the need for continued public education. Individuals should remain cautious of unsolicited messages, especially those urging immediate action or requesting personal or financial details.
(Source: Info Security)
