If you receive an email with a subject that reads “You have received new messages from HMRC”, that also has an attachment, please send it to phishing@hmrc.gsi.gov.uk and then delete it.