Romanian hackers defraud British tax authority HMRC: 21 searches across six counties
Prosecutors launched 21 searches on Thursday across six counties in a computer fraud case against the British tax authority. The actual loss exceeds £1.7 million.
Computer fraud against HMRC: searches in Argeș, Dolj, Ilfov, Dâmbovița, Bihor and Vaslui
Jurnalul.ro reports that prosecutors and police carried out 21 searches on Thursday in the counties of Argeș, Dolj, Ilfov, Dâmbovița, Bihor and Vaslui, as part of an investigation into fraud against the British Tax Authority (HMRC). The actual loss exceeds £1.7 million, according to the General Prosecutor's Office.
The searches targeted company premises and residential addresses of individuals under investigation for unauthorised access to a computer system, computer fraud and money laundering, all in continuous form. The investigation is being conducted by a joint Romanian-British team, with support from EUROJUST. Twenty investigation officers from the United Kingdom are also participating in the operation.
Two waves of fraudulent requests
Between 12 January 2024 and 18 February 2026, several Romanian citizens illegally accessed remotely the password-protected and multifactor-authenticated online platform of HMRC. In the names of companies from the United Kingdom, they submitted false VAT refund requests after modifying the bank account details where the money was to be transferred.
Of the 89 requests submitted during this period, 30 were approved and paid, causing an actual loss of £1,662,292.99. Another 59 requests, valued at £1,417,215.67, were not honoured and remained at the attempted stage. Separately, three income tax refund requests were made in the name of one taxpayer, valued at £16,452.26, which were not paid.
The second wave of fraudulent activity took place between 21 October 2025 and 1 February 2026: 84 VAT refund requests submitted without the knowledge of the targeted British companies. Of these, 16 were paid, causing a loss of £43,745.32, whilst 68 requests, valued at £297,617.94, remained at the attempted stage.
Total: over £1.7 million fraudulently obtained
Fraudulent refunds actually paid amount to £1,706,038.31. Other requests, totalling £1,731,285.87, were not paid, with related offences remaining at the attempted stage.
Prosecutors specify that details of several bank accounts were provided and entered in the refund requests, so that the amounts claimed from the British tax authority would be transferred to accounts controlled by those involved.
The searches aim to gather evidence, establish the role of each person under investigation and identify assets that can be used to recover the loss.
Source: Jurnalul.ro