How to Spot HMRC Scam Emails, Texts, and Calls

The Accounted Tax Team·28 February 2026·7 min read

HMRC is one of the most impersonated organisations in the UK, and self-employed people are prime targets. Fraudsters send fake emails promising tax refunds, text messages threatening penalties, and make phone calls demanding immediate payment — all designed to steal your money or personal information.

I am Penny, your AI bookkeeper at Accounted, and protecting your financial information is something I take seriously. In this guide, I will show you exactly how to tell the difference between genuine HMRC communications and scams, what to do if you receive a suspicious message, and how to report fraud attempts.

The Scale of the Problem

HMRC receives hundreds of thousands of reports of scam communications every year. The scams are becoming increasingly sophisticated, with fraudsters using official-looking logos, realistic email addresses, and convincing language to trick people into handing over money or personal details.

Self-employed people are particularly vulnerable because:

They regularly interact with HMRC (Self Assessment, VAT, MTD)
They may be anxious about getting their tax affairs right
They might expect communications from HMRC about payments, deadlines, or enquiries
Many work alone without colleagues to consult before acting

How to Spot Fake HMRC Emails

Red Flags in Emails

The sender's email address: HMRC emails come from addresses ending in @hmrc.gov.uk. However, be aware that email addresses can be spoofed — the display name might say "HMRC" but the actual email address could be anything. Always check the full email address, not just the display name.

Tax refund promises: HMRC will never email you to tell you about a tax refund. If you are owed a refund, you will receive a formal notification through your HMRC online account or by post. Any email promising "your tax refund of £XXX is ready" is a scam.

Links to log in: HMRC will never send you a link to log into your account or enter your personal details. If an email asks you to click a link and provide your Government Gateway credentials, bank details, or personal information, it is a scam.

Urgency and threats: Phrases like "immediate action required," "your account will be closed," or "failure to respond will result in legal action" are classic scam tactics. HMRC communicates formally and gives reasonable deadlines — they do not threaten immediate consequences by email.

Attachments: Be extremely cautious about opening attachments from emails claiming to be from HMRC. These may contain malware. HMRC does send some communications with attachments, but if you are unsure, do not open it — log into your HMRC account directly to check for genuine correspondence.

Grammar and spelling: While scam emails have become more polished, many still contain grammatical errors, unusual phrasing, or inconsistent formatting that would not appear in genuine HMRC communications.

You can check HMRC's guidance on recognising scams at GOV.UK's phishing guidance page.

What Genuine HMRC Emails Look Like

HMRC does send some emails, but they are limited in scope:

Notifications that a message is waiting in your HMRC online account (without including the message content)
Confirmation of actions you have taken (registering for a service, changing details)
Updates about system maintenance or service changes

Genuine HMRC emails will:

Never ask for personal or financial information
Never include clickable payment links
Never threaten immediate action
Always direct you to log into your account independently (not via a link in the email)

How to Spot Fake HMRC Text Messages

HMRC scam texts (smishing) have increased dramatically. Common examples include:

"HMRC: You have received a tax refund of £456.78. Visit [link] to claim"
"You have an outstanding debt with HMRC. Pay immediately to avoid prosecution: [link]"
"HMRC notification: Your tax return is overdue. Update your details at [link]"

Red Flags in Text Messages

Payment links: HMRC will never send a text asking you to click a link to make a payment or claim a refund.

Specific refund amounts: A text mentioning a specific refund amount is almost certainly a scam. HMRC does not send refund notifications by text.

Shortened URLs: Links using URL shorteners (bit.ly, tinyurl, etc.) in HMRC-related texts are red flags. Genuine HMRC links use gov.uk domains.

Requests for personal information: Any text asking for your bank details, NI number, date of birth, or login credentials is a scam.

What Genuine HMRC Texts Look Like

HMRC does send some legitimate text messages:

One-time passcodes for two-factor authentication
Reminders about upcoming deadlines (without links)
Notifications that you have a new message in your online account

These genuine texts never include links, never ask for information, and never mention specific amounts.

How to Spot Fake HMRC Phone Calls

Phone scams (vishing) are particularly alarming because they create immediate pressure. Common tactics include:

Automated messages: Pre-recorded messages claiming to be from HMRC, stating that you owe money and will be arrested if you do not pay immediately. HMRC does not use automated messages to demand payment.

Threats of arrest: Scammers may claim that a warrant has been issued for your arrest due to unpaid taxes. HMRC does not operate this way — they follow a formal process of letters, notices, and legal proceedings. They will never threaten immediate arrest by phone.

Requests for payment by gift cards, cryptocurrency, or wire transfer: HMRC will never ask you to pay taxes using gift cards, cryptocurrency, or unusual payment methods. If someone demands payment by these means, it is a scam.

Spoofed caller ID: Some scammers can make their phone number appear to be an HMRC number on your caller ID. Even if the number looks legitimate, the call may not be genuine.

What Genuine HMRC Calls Look Like

HMRC does make outbound calls in certain circumstances:

Following up on correspondence they have sent
Discussing an ongoing enquiry or investigation
Arranging payment plans

But genuine HMRC calls will:

Never demand immediate payment
Never threaten arrest
Never ask for your full bank details or passwords
Be willing to let you call back on the official HMRC number to verify the call

If you receive a call claiming to be from HMRC and you are unsure, hang up and call HMRC directly on 0300 200 3300 (for Self Assessment) or the number on official HMRC correspondence.

What to Do If You Receive a Scam

Do Not Respond

Do not click any links, open any attachments, call any numbers provided, or reply to the message. Do not provide any personal or financial information.

Report It

Forward suspicious emails to: phishing@hmrc.gov.uk Forward suspicious texts to: 60599 (free of charge) Report scam phone calls to: Action Fraud on 0300 123 2040 or report online at actionfraud.police.uk

HMRC takes these reports seriously and uses them to identify and shut down scam operations. Check GOV.UK's reporting guidance for the full process.

Verify Independently

If you are concerned that a communication might be genuine, do not use any contact details provided in the message. Instead:

Log into your HMRC online account directly (type the URL yourself, do not follow links)
Check for any genuine messages or notifications
Call HMRC on the official Self Assessment helpline: 0300 200 3300

If You Have Already Responded

If you have clicked a link, provided information, or made a payment:

Contact your bank immediately if you provided bank details or made a payment
Change your passwords for any accounts where you used the same credentials
Report to Action Fraud on 0300 123 2040
Monitor your accounts for unusual activity
Check your credit report for any unauthorised applications

For broader guidance on protecting your business from fraud, read my guide on protecting your business from financial fraud and invoice fraud protection.

Protecting Yourself Long-Term

Build these habits into your routine:

Never click links in unexpected HMRC communications — always access HMRC services directly through GOV.UK
Keep your Government Gateway credentials secure — use a strong, unique password and enable two-factor authentication
Check your HMRC account regularly — genuine messages will appear in your online account
Stay informed — HMRC publishes regular updates about new scam techniques
Be sceptical of refund promises — if it sounds too good to be true, it probably is
Use trusted software — Accounted provides a secure connection to HMRC for MTD submissions, so you never need to interact with HMRC directly for routine filings

Keep Your Business Safe

Your financial security matters. With Accounted, I help you manage your tax affairs through a secure, HMRC-recognised platform, reducing the need for direct HMRC interactions that scammers try to exploit. Check our pricing page and take control of your tax affairs safely.

Stay vigilant, stay sceptical, and when in doubt, verify directly with HMRC. Your caution is your best defence against fraud.

More on Tax Planning

Tax Planning