Avoiding Scams: Checking if an HMRC Message Is Genuine

Scammers are getting good

In today’s digital age, scams pretending to be from HMRC are on the rise. These scams are becoming more convincing, and even the most vigilant taxpayers can find themselves second-guessing an email, text, or letter they’ve received.

We’ve outlined some practical tips to help you identify whether a communication from HMRC is genuine or potentially fraudulent.

Pay Attention to the Details

Genuine correspondence from HMRC typically includes specific details related to your tax affairs. This might be your name or company name, a reference number (such as your UTR), and clear information about the purpose of the contact.

Be cautious if you notice:

• Generic greetings like ‘Dear Customer’;
• Messages requesting sensitive information like bank account details, passwords etc.;
• Spelling or grammatical errors;
• An unusual tone, especially if it’s threatening or overly urgent.

Understand What HMRC Will and Won’t Do

While HMRC does contact taxpayers via email, text, phone, and post, there are clear boundaries to what they will ask for:

HMRC will not:

• Ask you to make payments via gift cards, cryptocurrency, or money transfer services;
• Threaten arrest or legal action for non-payment over the phone or text;
• Send links in emails or texts that ask you to log in and submit personal details.

Any communication that includes these requests is almost certainly a scam.

Be Wary of Unexpected Calls or Messages

Scammers often create a false sense of urgency. If you receive a call telling you that you owe tax and must pay immediately, or risk legal consequences, hang up and take a moment to assess the call. Real HMRC calls do happen, but they will never pressure you to disclose personal details on the spot or make urgent payments there and then.

If you’re unsure, you can call HMRC back using the official numbers found on their website and not those provided in the message.

Exercise Caution with Emails and Texts

Even if an email or text appears to be from a legitimate sender, be cautious. Check the email address carefully (official HMRC emails often end in @hmrc.gov.uk). Avoid clicking on any links if you’re not 100% sure they’re safe.

What to Do If You’re Not Sure

If something seems off, it probably is. Here are some steps you can take:

• Don’t respond, click links, or download attachments;
• Forward suspicious emails to: phishing@hmrc.gov.uk;
• Forward suspicious texts to: 60599;
• If you’ve received a call, make a note of the number and report it to HMRC or Action Fraud.

Check With a Trusted Tax Adviser

We regularly help clients verify HMRC communications and respond safely. If you're in doubt about any message, it's worth having a professional review it. It’s far better to double-check than to risk disclosing personal or financial information to scammers.

To Summarise

Genuine contact from HMRC follows clear patterns and knowing what to look out for can help you avoid fraud and protect your personal information.

Next Steps

If you’ve received a message, letter, or phone call that doesn’t seem quite right, feel free to contact us.