The data, obtained by accountancy group Lanop Outsourcing under the Freedom of Information (FOI) Act, analysed data over the three most recent financial years (April 2018-2019, April 2019-2020, and April 2020-2021).

The figures show that reports of suspected SMS scams shot up 52% on last year, rising from 67,497 to 102,562 attacks.

Email scams exploded by 109%, rising from 301,170 to 630,193, and reports of phone call scams increased 66%, from 203,362 to 336,767.

Of the scams listed, the majority were tax rebate or refund scams which rose by 90% from 363,118 and 690,522. In addition, voice scam attacks rose by 66%, jumping from 203,362 to 336,767.

HMRC also receives reports for the Driver and Vehicle Licensing Agency (DVLA) and act on its behalf to initiate website takedowns. In FY 2019-20 there were 5,549 reports and a whopping 42,233 reports in 2020-21 – an increase of 661%.

Cyber expert Andy Harcup, senior director, Gigamon, commented: “The sharp rise in HMRC-branded phishing attacks poses huge risks to businesses and individuals, with many organisations lacking the resources to identify and protect against malicious hackers. All it takes is a single employee to unwittingly handover confidential passwords and user details and cyber criminals are free to enter and wreak havoc across the network.

“The fact is that companies cannot neutralise these attacks without full visibility into network traffic and getting complete visibility into potential hostile threats. The days of allowing security blind spots to remain unchecked are over and a getting a complete view of what’s happening and when should now be the new normal in terms of security protocol.”

Aurangzaib Chawla, director, Lanop Outsourcing, added: “With businesses on a fragile road to recovery following the COVID-19 crisis, it’s vital to remain vigilant about the very real risks posed by HMRC-branded scams.”