UK Tax Authority Says Scammers Stole £47 Million

The U.K.’s tax authority disclosed that cybercriminals stole £47 million ($63 million) last year by compromising taxpayer accounts. His Majesty’s Revenue & Customs (HMRC) said the losses were the result of fraudsters hijacking online profiles, allowing them to redirect tax refunds and manipulate personal data for financial gain.

The agency did not specify how the criminals accessed the accounts or whether the breach stemmed from phishing, credential stuffing, or another technique. However, the scale of the fraud highlights ongoing security challenges faced by government digital services.

HMRC has not provided a breakdown of how many individuals or businesses were affected. Still, the incident underscores the growing sophistication of cybercrime targeting public-sector platforms. The agency said it is working to bolster its defenses to prevent future losses.

The revelation comes amid increased scrutiny of cybersecurity standards across U.K. government departments, where digital transformation has expanded the attack surface for threat actors.