UK Tax Office Sends an Invitation to Phishers

The report criticises HMRC for sending bulk emails with inline links and using a third‑party email service (capitalcommunicationsgroup.net), showing raw headers that indicate the messages did not originate from HMRC. It warns that this practice conditions users to click links and provides an easy template for phishers to create credible fraudulent emails, increasing the risk of phishing attacks ahead of a planned future mailing.