Reports of phishing scams that claim to be from HMRC have already claimed thousands of victims.