(Of course, a message like this could have the headers spoofed to look as if it came from the real HMRC, so such an address doesn’t prove the mail is genuine: see below.) Not just because it doesn’t seem logical for Her Majesty’s tax-collectors to be asking for credit card ...