HMRC scams are becoming more sophisticated with each passing day. Fraudsters convincingly masquerade as the government’s department for enforcing tax laws, using clever language involving fear, urgency and material that appears official, with the aim of tricking taxpayers into handing over money or data.
In the past year alone, HMRC has received over 135,000 reports of suspected scams or fraudulent activity, with numbers particularly high around the January Self-Assessment tax return deadline. However, with Making Tax Digital (MTD) for Income Tax now enforced, it’s prudent to wonder whether this will only proliferate even further.
At Hamlyns, protecting our clients’ security and financial wellbeing is of paramount importance to us. In this guide, we’ll explain how to recognise HMRC scams, distinguish genuine correspondence from fraudulent material, and take the right steps if you’ve been targeted.
The Most Common Types of HMRC Scams
Fraudsters can use several channels and resources to impersonate HMRC.
Phishing Emails
Fraudulent emails typically entice taxpayers into claiming tax refunds that don’t exist, or strike fear by demanding urgent payment for unpaid taxes, or warn them that their National Insurance (NI) number has been compromised when it hasn’t. Their correspondence appears official and legitimate, using the HMRC logo, similar language and urgent messaging designed to create panic.
Common examples include:
- Fake tax refund offers, like: “You are eligible for a £532 tax refund. Click here to claim.”
- Unpaid tax threats, such as: “You owe £1,247. Pay immediately to avoid legal action and further fines.”
- Verification requests: “HMRC needs to verify your details due to a system migration. Click here to confirm.”
Scam Text Messages
Much like emails, fraudsters send SMS messages that appear to come from “HMRC” using number spoofing technology. These texts invariably claim you’re owed a refund (with a link to “claim” it), or warn of imminent action unless you respond immediately. These links often lead to fake (and yet convincing-looking) websites designed to harvest your information or install malware.
Phone Call Scams
Scam calls, many of which are automated, use recorded voices claiming that HMRC is filing a lawsuit or you face arrest for tax fraud, instructing you to “press 1” to speak to an officer. This can then, when pressed, connect you to a scammer impersonating an HMRC officer, using threatening language and creating urgency to trick you into making payment via bank transfer, gift cards, or cryptocurrency. HMRC never uses these methods.
Fraudulent Letters
Official-looking letters from “HMRC”, often addressed to business or accountants’ addresses and referencing the “Individual and Small Business Compliance Team”, threaten to freeze trading activity unless you provide sensitive information immediately. Some HMRC scam letters even include QR codes linking to fake websites designed to steal credentials.
How to Spot a Scam HMRC Email, Text, Call or Letter
Be immediately suspicious if communication:
- Creates urgency or threatens severe consequences like arrest or immediate legal action
- Requests personal information such as passwords, PINs, full bank details, credit card numbers, or National Insurance numbers via email, text, or phone
- Demands payment via unusual methods including gift cards, cryptocurrency, or bank transfers to personal accounts
- Is unexpected or unsolicited, particularly about refunds or urgent matters
- Has suspicious sender details (genuine HMRC emails end in @hmrc.gov.uk, not variations like @hmrc-refunds.co.uk or @hmrcgovuk.com)
- Contains poor grammar or spelling errors, or awkward phrasing
- Asks you to click links or open attachments unexpectedly
- Uses generic greetings like “Dear customer” or “Dear taxpayer” instead of your name
How to Know Your HMRC Correspondence is Legitimate
HMRC will:
- Write to you first before making phone contact about most matters
- Use your Government Gateway account for secure online communications
- Send letters on official headed paper with clear reference numbers
- Allow reasonable time to respond or take action
- Direct you to official GOV.UK websites for anything tax-related
- Contact you via your registered accountant if you’ve authorised one
HMRC will never:
- Leave threatening voicemails about supposed arrests or legal action
- Demand immediate payment without prior written correspondence
- Request payment via gift cards, personal bank transfers, or cryptocurrency
- Ask for passwords, PINs, or full bank details via email, text, or phone
- Notify you about tax refunds via email, phone or text – refunds are communicated through your official online account or official letter
- Pressure you into instant, hasty decisions
- Send emails with links asking you to verify personal information
If you’re in any way unsure, don’t respond directly. Instead, contact HMRC using the official phone numbers or addresses published on GOV.UK.
What to Do If You Suspect an HMRC Scam
If you’ve received suspicious-looking communications from a person or business claiming to be from HMRC:
- Do not respond, click links, or provide any information. Even responding confirms your contact details are active.
- Do not call back any of the numbers in the message. Use official HMRC contact details from GOV.UK.
- Check HMRC’s list of recent correspondence on GOV.UK. HMRC publishes recent details of letters sent to taxpayers. If your letter doesn’t match, it may be fraudulent.
- Verify HMRC messages independently by logging into your Government Gateway account directly (by typing the address yourself, and not by clicking any links).
- Contact your accountant. If you work with Hamlyns, we can quickly verify whether communication is genuine and advise on appropriate action.
How to Report HMRC Scams
Reporting scams to HMRC can help track notorious fraudsters and protect others who may be at risk. Here’s the correct reporting channel for specific fraud types:
- Phishing emails: Forward the email to phishing@hmrc.gov.uk, then delete it from your inbox.
- Scam texts: Forward the text message to 60599 (which is a free service), then delete it.
- Phone calls: Report calls via GOV.UK or contact Action Fraud.
- Fraudulent letters: Contact HMRC using GOV.UK details to verify authenticity.
- Social media scams: If someone contacts you via social media, report the message to the platform and email phishing@hmrc.gov.uk.
If You’ve Already Responded to a Scam
If you suspect you’ve already provided information or made payment to a scam HMRC link, it’s imperative you act immediately:
- Contact your bank to stop transactions or freeze affected accounts.
- Change passwords for your Government Gateway account, email, and other accounts. Create strong, unique passwords for each account.
- Enable two-factor authentication on all accounts to add an extra security layer.
- Run comprehensive antivirus and anti-malware scans if you clicked links or downloaded attachments.
- Report to Action Fraud (0300 123 2040 or actionfraud.police.uk). In Scotland, contact Police Scotland on 101.
- Monitor your accounts closely for suspicious activity over the following months. Check bank statements, credit reports, and HMRC records thoroughly.
- Inform your workplace IT department if the scam came through work devices or emails.
If you are one of our clients and you suspect you’ve been the victim of a scam HMRC campaign, contact Hamlyns immediately. We can assess the situation, advise on protecting your tax position, and liaise with HMRC on your behalf.
How Hamlyns Protects Your Interests
As your trusted accountant, Hamlyns provides an additional layer of protection. We can:
- Verify whether communications claiming to be from HMRC are genuine
- Access your HMRC account on your behalf to check for authentic correspondence
- Communicate directly with HMRC on your behalf to reduce your risk exposure
- Spot unusual activity or suspicious requests quickly
- Advise on proper security etiquette for your tax affairs
- Support you through the aftermath if you’ve been targeted
Scammers use clever methods to exploit genuine feelings of confusion, fear, and urgency. If you receive supposed communications from HMRC and feel uncertain, it’s important to get a second opinion before responding. At Hamlyns, we want to help you preserve your financial autonomy and ensure you’re not at risk. For a comprehensive breakdown of our secure accounting services, and how we help you securely and compliantly grow your business with full confidence, get in touch with our team today.
