Tax scams are becoming increasingly sophisticated, with fraudsters often impersonating HMRC through phone calls, emails, text messages, letters, and even QR codes. These HMRC scams are designed to steal your personal information or trick you into making payments.
The good news is that HMRC provides guidance to help taxpayers identify genuine communications. Knowing what to expect can help you stay safe and avoid becoming a victim of fraud.
Phone Calls
HMRC may contact you by phone in certain situations, such as:
- Following up on a previous enquiry.
- Discussing your tax affairs.
- Carrying out compliance checks.
- Collecting tax debts.
- Verifying information you’ve provided.
However, scammers also make calls pretending to be from HMRC.
Be cautious if a caller:
- Says you’re due an unexpected tax refund.
- Demands immediate payment.
- Threatens arrest or legal action.
- Requests your bank PIN, passwords, or full banking credentials.
- Pressures you to make a payment during the call.
If you’re unsure whether the call is genuine, end the conversation politely and verify the contact using HMRC’s official guidance before taking any action.
Emails
HMRC sends emails for certain services, including updates about your tax account or information you’ve requested.
However, fraudsters frequently send fake emails that closely resemble genuine HMRC messages.
Warning signs include:
- Unexpected tax refund offers.
- Requests for personal or financial information.
- Urgent payment demands.
- Unexpected attachments or suspicious links.
Stay Safe
If you’re uncertain whether an email is genuine:
- Don’t click any links or open attachments.
- Visit the GOV.UK website directly through your browser.
- Sign in to your HMRC online account manually to check for any genuine messages.
Letters
HMRC regularly sends official letters regarding matters such as:
- Self Assessment
- PAYE
- VAT
- Corporation Tax
- Tax payments
- Compliance checks
Although many letters are genuine, fraudsters have also been known to send convincing fake letters.
Before responding:
- Check that the letter appears genuine.
- Compare it with examples published by HMRC.
- Contact HMRC directly if you have any doubts.
Never send money or personal information solely because a letter looks official.
Text Messages (SMS)
HMRC may send genuine text messages to:
- Confirm that a Self Assessment refund is being processed.
- Send security verification codes.
- Follow up after you’ve contacted HMRC.
- Provide reminders about certain tax services.
Some official HMRC text messages may include links to GOV.UK or HMRC webchat services.
If you’re unsure whether a text message is genuine:
- Avoid clicking any links.
- Don’t reply with personal or financial information.
- Access GOV.UK directly through your browser instead.
HMRC will never ask you to provide passwords, bank PINs, or full banking details by text message.
QR Codes
Some genuine HMRC letters now include QR codes that link to official GOV.UK guidance or additional information.
Before scanning a QR code:
- Check that the letter itself is genuine.
- Make sure the QR code directs you to an official GOV.UK webpage.
If you’re unsure, don’t scan the code until you’ve verified the letter with HMRC.
More Than One Method of Contact
In some cases, HMRC may contact you using more than one method.
For example:
- A letter followed by a phone call.
- An online message followed by a text reminder.
- A letter requesting information before a follow-up call.
Receiving multiple communications doesn’t necessarily mean it’s a scam, but it’s always worth verifying unexpected contact if you’re unsure.
How to Check Whether HMRC Contact Is Genuine
HMRC publishes guidance on GOV.UK to help taxpayers verify recent communications, including:
- Phone calls
- Emails
- Letters
- Text messages
- QR codes included in letters
- Contact using multiple communication methods
If you’re ever uncertain about a communication claiming to be from HMRC, check the official guidance or contact HMRC directly using the contact details published on GOV.UK.
Reporting HMRC Scams
If you receive a suspicious communication claiming to be from HMRC, you can help protect others by reporting it.
- Forward phishing emails to phishing@hmrc.gov.uk.
- Forward suspicious text messages to 60599.
- Report suspicious phone calls using HMRC’s online scam reporting service on GOV.UK.
- Report fake HMRC social media accounts through the relevant social media platform.
Tips to Stay Safe
- Never share passwords, PINs, or security codes.
- Be cautious of unexpected tax refund offers.
- Don’t rush into making payments because of threats or pressure.
- Access your HMRC account by visiting GOV.UK directly rather than following links in unexpected emails or text messages.
- Verify unexpected communications before responding.
- If in doubt, contact HMRC using the official contact details published on GOV.UK.
Frequently Asked Questions (FAQs)
1. Does HMRC contact taxpayers by phone?
Yes. HMRC may call regarding your tax affairs, compliance checks, debt collection, or previous enquiries. They will not unexpectedly call to demand immediate payment or ask for sensitive banking information.
2. Does HMRC send emails?
Yes. HMRC sends genuine emails for certain services and account updates. If you’re unsure whether an email is genuine, don’t click any links. Instead, visit GOV.UK directly or sign in to your HMRC online account.
3. Does HMRC send text messages?
Yes. HMRC may send genuine text messages about refunds being processed, verification codes, reminders, or follow-up communications. Some genuine texts may include GOV.UK links, so if you’re uncertain, access GOV.UK manually instead of following the link.
4. How can I verify if a letter from HMRC is genuine?
Compare the letter with examples published by HMRC and contact HMRC directly if anything seems suspicious.
5. Does HMRC use QR codes?
Yes. Some official HMRC letters contain QR codes linking to GOV.UK guidance. Always verify that the letter is genuine before scanning the code.
Stay Alert
HMRC uses several methods to communicate with taxpayers, and fraudsters often try to imitate these communications. Whenever you receive an unexpected phone call, email, letter, text message, or QR code claiming to be from HMRC, take a few moments to verify that it is genuine before responding. Staying cautious can help protect your personal information, finances, and peace of mind.