The biometric voice data had been collected without explicit consent from people calling the HMRC’s telephone hotline for advice.
The UK tax authority continues to store a huge database of millions of voice IDs which were collected without permission.
Who’s been collecting the voice prints of millions of people saying “My voice is my password”? Why has it become tougher for law enforcement to scoop up cellphone data? And who’s been turning up your central heating? All this and much much more is discussed in the latest edition of the award-winning “Smashing Security” podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by John Hawes from AMTSO.
It looks like a phishing email, but is it? Maybe the UK’s HMRC should be a little more careful with how it writes its emails, if even experts think a link looks suspicious.
The real HMRC will never inform you about a tax rebate via email, so remember to always be suspicious of any unsolicited emails which makes such claims. Good job that these phishers are lousy at spelling…
Read more in my article at Naked Security.