HMRC Issues Urgent Warning About Winter Fuel Payment Scams

Over 15,000 scam reports in June 2025 prompt government alert.

His Majesty’s Revenue and Customs (HMRC) has issued a stark warning to the public after a dramatic rise in scam activity linked to Winter Fuel Payments. In June alone, the department received more than 15,000 reports of fraudulent attempts to deceive individuals through fake messages and websites. In response, HMRC took swift action and successfully shut down over 4,600 phishing websites that were impersonating official services.

These scams are often sophisticated and designed to trick people—particularly the elderly or financially vulnerable—into handing over personal details, banking information, or even transferring money under false pretences.

How Scammers Are Operating

The most common tactics involve SMS phishing (known as “smishing”) and fake websites that mimic the look and feel of official HMRC pages. These messages usually urge recipients to take immediate action, such as claiming a payment or verifying their information, and often include links that lead to malicious websites.

Once on these fake sites, users may be prompted to enter sensitive data, which fraudsters then use for identity theft or financial fraud. In some cases, the scams request bank account details to “process” Winter Fuel Payments—something HMRC never does via text or unsolicited emails.

HMRC’s Official Position

HMRC has made it explicitly clear that it does not contact individuals via text or email to request personal or financial details in relation to Winter Fuel Payments. The majority of those eligible for the payment will receive it automatically and are not required to apply. Where necessary, tax adjustments related to the payment for higher-income pensioners (those earning over £35,000) will be made through the existing Pay As You Earn (PAYE) system or via Self Assessment.

Statement from HMRC’s Chief Security Officer

Kelly Paterson, Chief Security Officer at HMRC, emphasized the importance of public vigilance:

“Don’t be fooled by these attempts by scammers to take your money or access your personal information. If someone contacts you saying they’re from HMRC and urges you to transfer money or give personal data, be on your guard.”

She added that people should never rush to respond, and should always verify the authenticity of communications before taking any action.

Advice for Staying Safe

HMRC urges the public to follow three key steps: Protect, Recognise, and Report.

1. Protect Your Information

• Use strong, unique passwords for your online accounts.
• Be wary of unsolicited messages asking for personal or financial data.
• Never click on unknown links or download attachments from suspicious emails or texts.

2. Recognise the Signs

• HMRC will never ask for sensitive information via text message or email.
• Scammers often create a sense of urgency to pressure victims into acting quickly.
• Even if a message looks genuine, always verify the source by visiting GOV.UK or calling official contact numbers.

3. Report Suspicious Contact

• Forward suspicious texts claiming to be from HMRC to 60599.
• Send suspicious emails to phishing@hmrc.gov.uk.
• Report scam phone calls through the GOV.UK tax scam reporting service.

If you believe you have shared sensitive information or money has been stolen, contact your bank immediately and report the matter to Action Fraud. In Scotland, you should contact the police via 101.

Broader Public Protection Campaign

This warning is part of a wider government effort to protect the public from a surge in digital scams, particularly targeting older adults and those in receipt of government support. The Home Office also continues to promote its “Stop! Think Fraud” campaign, which provides advice on how to stay secure online and avoid falling victim to financial fraud.

To learn more about how to protect yourself and others from scams, visit:
🔗 www.gov.uk/stopthinkfraud

Final Note

Scams of this nature can be distressing and financially damaging. HMRC is working closely with cybersecurity partners and law enforcement agencies to take down malicious websites and prevent further attacks. However, the best defence is public awareness.

If you or someone you know receives a message about Winter Fuel Payments that seems suspicious, always check directly with HMRC before responding. Vigilance and early reporting can help stop fraud in its tracks and protect those most at risk.