Overseas cyber-crimewave taking £600m a year from the taxman
Lax cyber security at HM Revenue and Customs is costing taxpayers hundreds of millions of pounds a year in sophisticated scams that are largely perpetrated by foreign criminals, The Independent has learnt.
The scams take different forms but have the same result: tricking officials into sending legitimate tax rebate cheques to a false address. The cheques are then picked up by a series of British-based mules who cash them on behalf of their handlers abroad.
The problem has become so severe that HMRC has been forced to set up a new cyber defence team to track down the thieves. One insider said that HMRC has estimated the losses to be as much as £600m a year.
Under the Government's new strategy for tackling cyber crime and security GCHQ will be used to help the private sector combat the problem and a new e-crime unit will be set up at the National Crime Agency.
The Government has committed £650m to tackling cyber crime and foreign threats. E-crime is estimated to cost the economy £27bn. But critics say losses like those at HMRC reveal how little is spent targeting cyber-crime. Peter Warren, chairman of the Cyber Security Research Institute, which uncovered the scams, said: "There is a need for a radical overhaul of the way HMRC confirms someone's identity to avoid not only government embarrassment but also a loss to the taxpayer – money which could be spent tackling cyber-crime."
Most of the HMRC scams work by infecting a person's computer with malicious software, or by tricking them into navigating towards a fake website that persuades users to input their personal details. The software either collects log-in details or adds new data input fields to the official HMRC website when a user visits it.
When they find members of the public who are entitled to a tax rebate the criminals change the name and address that the cheque should be sent to. The money is then collected and quickly laundered.
Cyber security experts say both the number and sophistication of attacks aimed at HMRC have increased dramatically over the past three years.
A spokesperson for the HMRC said: "We take the security of our customers' data extremely seriously and we do not discuss the detail of our security defences," he said. "We monitor repayment transactions and continue to address any fraudulent repayments."
Rihanna 'nude pictures' claims emerge on 4Chan as hacking scandal continues
Slough train station deaths: Woman and child killed after being 'pushed in front of train'
Kim Kardashian 'nude photos' leaked on 4chan weeks after Jennifer Lawrence scandal
'F*ck it, I quit': KTVA reporter Charlo Greene quits live on air in spectacular fashion
Jennifer Lawrence: Leaked 4Chan sex video branded 'fake' by users
Scotland could still declare independence – even without referendum, says Alex Salmond
Scottish referendum results: Cross-party consensus collapses amid Tory-Labour spat on the 'English question'
Hilary Mantel 'should be investigated by police' over Margaret Thatcher assassination story, says Lord Bell
Plebgate MP Andrew Mitchell called officer a 'little s**t', claim court documents 'exposing ex-Chief Whip's 'record of abusing police'
Archbishop of Canterbury admits doubts about existence of God
Labour Party conference: Ed Balls to set out plan to freeze child benefit to balance books
- 1 Cyclist in Russia narrowly misses being hit by car and lorry
- 2 'F*ck it, I quit': KTVA reporter Charlo Greene quits live on air in spectacular fashion
- 3 What are your fingerprint words?
- 5 Pink Floyd new album: Band unveil cover art for first record in 20 years