To help HMRC investigations, report all HMRC related phishing emails and bogus text messages to HMRC. Even if you get the same or similar phishing email or text message often, email it to phishing@hmrc.gov.uk and then delete it.

Do not open attachments or click any links in an email or text message, as they may contain malicious software or direct you to a bogus website.

See further examples here