A group suspected of tax fraud using real taxpayers’ details has been arrested, with 13 arrests in Romania and one in the UK. According to HMRC, the suspects allegedly used phishing scams to gather personal information from genuine taxpayers.

The data was then allegedly used to submit fraudulent claims for PAYE, VAT and Child Benefit. The operation to apprehend the suspects was a joint effort between HMRC, Romanian police and prosecutors and the Crown Prosecution Service.

HMRC said: “Our cross-border partnership has demonstrated the power of collaboration in tackling serious organised fraud… We will keep working to stop criminals in their tracks.”

The tax authority also reassured that any affected accounts had already been “secured”, but charges had not yet been made at the time of writing. However, it issued an urgent warning for taxpayers to remain vigilant with their personal information.

If you suspect a scam or tax fraud scheme, HMRC urges you to “report it now” by visiting the Gov.uk website and searching ‘report tax fraud‘. This could include suspicions of someone hiding or moving assets, evading tax, fraudulently claiming Child Benefit or tax credits, or importing or exporting goods without a licence.

If you suspect fraud, you can report it anonymously using an online form. But HMRC warned: “For your own safety, you should not try to find out more or let anyone know you’re making a report.

“Don’t send supporting documents right away. Just let HMRC know if you have any when you file your report. If you’ve left contact details, they’ll reach out for further info if necessary.”

Phishing scams are rife, with criminals using emails, texts, or calls to con people into handing over personal info. The National Cyber Security Centre warns that clicking on dodgy links could infect your device with a virus that steals your data, if the criminals aren’t asking for your information directly.

However, the NCSC has some top tips for staying safe, including “make yourself a harder target”.

It advised: “Criminals use information about you that’s available online (including on social media sites) to make their phishing messages more convincing. You can reduce the likelihood of being phished by thinking about what personal information you (and others) post about you, and by reviewing your privacy settings within your social media accounts.”

By reporting any fishy phishing attempts, you’re not just protecting yourself but also helping others by getting scammy sites shut down.

If you’ve fallen prey to a scam and suspect that the fraudsters have your personal details, it’s crucial to act swiftly. The steps you need to take largely depend on what kind of information you believe the criminals possess.

Should you have given out your bank details, your first port of call should be your bank. If funds have already been withdrawn from your account, report it as a crime to Action Fraud. If you suspect that the criminals might have access to your passwords or that a virus has been installed on your device, reset your passwords immediately and run a full scan with your antivirus software.

If you’ve been targeted by a scam involving or impersonating HMRC, you can report it directly to them online and cross-check it against their list of genuine HMRC contacts. It’s also worth bearing in mind that HMRC will never offer a tax rebate or request personal details via text or social media.