Cyber security threats are constantly evolving. As you already know, the security of HMRC’s systems and customer data is one of our top priorities.

Here’s a reminder of how you can play your part:

Use strong and separate passwords

• don’t use the same password over multiple systems
• choose something that’s not easy to guess; such as three random words or a combination of letters and numbers
• don’t use words or dates that are related to you or your family, e.g. birthdays, children’s names, pets’ names
• keep your password private – don’t share it with colleagues
• immediately change your password if you suspect it has been compromised
• don’t use a variation of your old password when changing it
• use two-step verification when available.

Beware of misleading websites

Scammers create websites that look similar to HMRC’s official site and then direct the public to call numbers with extortionate costs, instead of the low cost and no cost service HMRC provides. These sites promote non-HMRC premium rate phone numbers as a means of reaching HMRC but are merely call forwarding services, which connect callers to HMRC at a significant price.

Always check GOV.UK for genuine contact numbers.