How to Recognise and Avoid HMRC Tax Scams in the UK

Tax scams in the UK are becoming increasingly sophisticated, especially when it comes to the Self-Assessment Tax Return deadline. Scam artists will often try to impersonate HMRC to trick business owners into sharing personal or financial information. Whilst HMRC have reported a 12% drop in scam referrals between 2024 and 2025, scams are still very much active and it’s important to be cautious.  

This blog explores how to spot a fake HMRC message, how to avoid phishing and refund scams, and ways in which you can protect both yourself and your business from financial fraud.

• Learn how to identify fake HMRC calls, texts and emails. 

• Protect your business from phishing scams and refund fraud. 

• Know what to do if you do receive any suspicious messages. 

• Know the process for reporting tax scams to HMRC and Action Fraud. 

Criminals will pose as HMRC using emails, texts, phone calls or even through social media messaging to steal personal information, data and money. Scams have been known to: 

• Promise tax rebates or refunds that you weren’t expecting. 

• Request personal details from you, including your bank details. 

• Threaten lawsuits, arrest or fines if you don’t comply with their wishes and respond immediately. 

The following red flags should signal a scam: 

• The sender’s email address: HMRC will only ever email from an address that ends with @hmrc.gov.uk. 

• Spelling mistakes: HMRC are very good at ensuring their communication has near-perfect grammar, so any obvious spelling mistakes or unusual wording should raise a red flag. 

• QR codes: if the code doesn’t send you directly to the gov.uk website, it’s a scam. 

• Text messages: Personal information or financial details are never requested over text message from HMRC. 

• WhatsApp: Has never been used by HMRC for tax refunds or rebates. 

• Social Media: HMRC will never contact taxpayers through private messages on social media. 

• Phone calls: HMRC would never threaten arrest or legal action. If you are faced with such activity when speaking to someone claiming to be from HMRC, hang up straight away. 

Never click on suspicious links. Instead hover over them to see where they lead and avoid URLs that don’t take you straight to the gov.uk website. 

Don’t open unknown attachments. HMRC will very rarely send you any attachments via email. Always ensure that you verify any QR codes, by checking they link to the gov.uk website. 

Don’t respond directly. Report any suspected scams with HMRC through their official phone number or website. 

Protect your financial information. Never share payment information through text or email. Genuine HMRC refunds are paid automatically into your account registered with them. 

Never succumb to pressure. Scam artists will often use pressure to get you to hand over valuable information. Take the time to verify communication before acting on it. 

It’s ok to question unexpected contact. If it’s out of the blue, hang up and contact HMRC directly. 

Speak to your Client Director. If you’re still questioning whether the contact was genuine, speak to your Client Director who will be able to advise you further.  

File your Self-Assessment Tax Return early. Scams seem to be more prevalent in the lead up to tax return season, and so by filing early you’re reducing any pressure you might feel and it’ll help you remain alerted to possible scams.  

Check HMRC’s confirmed scam list. Visit gov.uk for all the latest examples of tax scam messages and fake emails.  

Report any suspicious activity. If you feel you’ve been targeted, report it to phishing@hmrc.gov.uk, text 60599, or contact Action Fraud.  

Act immediately to reduce the impact and ensure your details are safe: 

• Change passwords and contact your bank.  

• Forward phishing emails to phishing@hmrc.gov.uk.  

• Text scam messages to 60599.  

• Report online fraud to Action Fraud (03001232040).  

You can also visit the Government’s ‘Stop! Think Fraud’ campaign, and the National Cyber Security Centre’s business toolkit for guidance on protecting your data and staff.  

Tax scams can affect anyone, and be staying informed, verifying communication and acting cautiously, you’re able to protect yourself from financial loss and identity theft.  

For more advice and support, ensure to speak with your Client Director.