Overseas cyber-crimewave taking £600m a year from the taxman
Lax cyber security at HM Revenue and Customs is costing taxpayers hundreds of millions of pounds a year in sophisticated scams that are largely perpetrated by foreign criminals, The Independent has learnt.
The scams take different forms but have the same result: tricking officials into sending legitimate tax rebate cheques to a false address. The cheques are then picked up by a series of British-based mules who cash them on behalf of their handlers abroad.
The problem has become so severe that HMRC has been forced to set up a new cyber defence team to track down the thieves. One insider said that HMRC has estimated the losses to be as much as £600m a year.
Under the Government's new strategy for tackling cyber crime and security GCHQ will be used to help the private sector combat the problem and a new e-crime unit will be set up at the National Crime Agency.
The Government has committed £650m to tackling cyber crime and foreign threats. E-crime is estimated to cost the economy £27bn. But critics say losses like those at HMRC reveal how little is spent targeting cyber-crime. Peter Warren, chairman of the Cyber Security Research Institute, which uncovered the scams, said: "There is a need for a radical overhaul of the way HMRC confirms someone's identity to avoid not only government embarrassment but also a loss to the taxpayer – money which could be spent tackling cyber-crime."
Most of the HMRC scams work by infecting a person's computer with malicious software, or by tricking them into navigating towards a fake website that persuades users to input their personal details. The software either collects log-in details or adds new data input fields to the official HMRC website when a user visits it.
When they find members of the public who are entitled to a tax rebate the criminals change the name and address that the cheque should be sent to. The money is then collected and quickly laundered.
Cyber security experts say both the number and sophistication of attacks aimed at HMRC have increased dramatically over the past three years.
A spokesperson for the HMRC said: "We take the security of our customers' data extremely seriously and we do not discuss the detail of our security defences," he said. "We monitor repayment transactions and continue to address any fraudulent repayments."
Weather bomb in pictures: Storms cuts power for tens of thousands – and snow is on the way
Jessica Chambers: 19-year-old woman 'doused with lighter fluid and burned alive' in the US
Russell Brand calls Nigel Farage 'poundshop Enoch Powell' in BBC Question Time debate
Russell Brand was rendered speechless on Question Time by this man
Fury at Airbus after it hints the super-jumbo may be mothballed
Disgruntled RBS worker writes hilarious open letter to Russell Brand after anti-capitalist publicity stunt leaves him hungry
Nigel Farage defends Kerry Smith 'ch***y' comment: 'If you are going for a Chinese, what do you say you’re going for?'
Nigel Farage's approval rating hits 'record low' as popularity suffers in wake of Ukip sex scandal
Pakistan school attack live: Taliban kill at least 132 children in 'horrifying' massacre
Sony hack: Angelina Jolie branded 'seriously out of her mind' in further embarrassing leaked email saga
Panic Saturday: 13 million Britons spend £1.2bn – while 13 million others across the country live in poverty unable to afford food
- 1 Nigel Farage: Me vs Russell Brand on Question Time – he's got the chest hair but where are his ideas?
- 2 Harry Potter fans can apply to the Hogwarts-inspired College of Wizardry
- 3 Jessica Chambers: 19-year-old woman 'doused with lighter fluid and burned alive' in the US
- 4 Russell Brand calls Nigel Farage 'poundshop Enoch Powell' in BBC Question Time debate
- 5 Orange Wednesdays are no more