HMRC customers are strongly advised to lookout for a new phishing scam. If you get an email with the subject, “Your 2016 Tax Report”, with an attachment, do not open it.
Please forward it to phishing@hmrc.gsi.gov.uk and then delete it.

For more advice, please visit GOV.UK and search “phishing”.