Identifying and Dealing with HMRC Scam Letters

/Published:17th September 2026/inLimited Company, Running a business, Self Employed, Sole Trader
Accounting Wise - identifying and dealing with HMRC scam letters

Get 50% off our services for the first 6 months when you sign up to one of our Pre-Built or Bespoke Packages!

Receiving a letter from HM Revenue & Customs can be worrying at the best of times. If that letter says you owe tax, have missed a deadline or need to take urgent action, it is natural to want to deal with it straight away.

Unfortunately, fraudsters know this too.

HMRC scams are not limited to suspicious emails and text messages. Criminals can also use convincing letters, invoices, QR codes and follow-up phone calls to impersonate HMRC and persuade individuals and businesses to hand over money or sensitive information.

At the same time, HMRC genuinely does contact taxpayers by post about Corporation Tax, Self Assessment, PAYE, VAT, compliance checks, outstanding returns, penalties and unpaid tax. Some genuine HMRC letters can also contain fairly urgent language.

So, how can you tell the difference?

This article hopefully covers how to identify a potentially fake HMRC letter, how to check whether HMRC correspondence is genuine and what to do if you think you or your business has been targeted by a scam.

Do HMRC Still Send Letters?

Yes. Despite more tax services moving online, letters remain an important part of HMRC’s communication with taxpayers and businesses.

HMRC may write to you about matters including:

  • Self Assessment tax returns and payments;
  • Corporation Tax and Company Tax Returns;
  • VAT returns, registration or payments;
  • PAYE and employer liabilities;
  • National Insurance;
  • tax repayments;
  • late filing or late payment penalties;
  • outstanding tax debts;
  • requests for additional information; and
  • tax compliance checks or enquiries.

For example, during a genuine HMRC compliance check, HMRC may write to request information or documents relating to your tax affairs.

This is why receiving an unexpected letter should not automatically be treated as a scam. Equally, a letter carrying an HMRC logo should never automatically be assumed to be genuine.

What Is an HMRC Scam Letter?

An HMRC scam letter is correspondence designed to look as though it has been issued by HMRC when it has actually been sent by a fraudster.

The objective is usually to persuade the recipient to make a payment, disclose personal or financial information, visit a fraudulent website or make contact with the scammer.

A scammer may claim that:

  • your business has an outstanding tax bill;
  • you have received a penalty;
  • HMRC is about to take enforcement action;
  • your VAT or Corporation Tax payment has failed;
  • you are due a tax refund;
  • your Government Gateway or HMRC account needs to be verified;
  • your tax affairs are under investigation; or
  • you must scan a QR code or visit a website to resolve an issue.

Modern scam letters can look convincing. Fraudsters can reproduce logos, addresses, reference numbers and formatting that resemble genuine HMRC correspondence. Some scams also combine a letter with a subsequent phone call, email, WhatsApp message or text message to make the approach appear more credible.

How to Spot a Fake HMRC Letter

There is no single feature that proves a letter is fraudulent. Instead, look at the correspondence as a whole and verify anything that does not seem right.

1. It Creates Unusual Pressure or Urgency

Be particularly cautious if a letter attempts to rush you into making a payment or providing information immediately.

HMRC’s own scam guidance warns that suspicious communications may rush or threaten recipients, arrive unexpectedly, request personal information or instruct people to transfer money.

A short deadline does not automatically mean a letter is fraudulent. Genuine HMRC correspondence can contain deadlines and explain the consequences of failing to respond. The important point is to independently verify the request before acting.

2. The Payment Instructions Look Unusual

If a letter says you owe tax, check carefully how it asks you to pay.

Do not transfer money simply because the letter contains an HMRC logo, a payment reference and bank details.

Instead, use the relevant payment guidance on GOV.UK to establish the correct method of paying the tax concerned.

This is especially important for businesses dealing with Corporation Tax, VAT, PAYE and Self Assessment liabilities where significant payments may be involved.

3. It Asks for Sensitive Information

Be cautious if an unexpected letter asks you to disclose information such as:

  • online banking passwords;
  • full card details;
  • Government Gateway passwords;
  • security codes;
  • one-time passcodes;
  • copies of identity documents without a clear reason; or
  • other sensitive financial information.

HMRC may legitimately need to verify your identity or request information as part of its work, but establish that you are communicating with HMRC before providing sensitive information.

4. The Website Address Does Not Look Right

A fraudulent letter may direct you to a website designed to resemble GOV.UK or an HMRC online service.

Look carefully at the web address rather than relying on the design of the page. A professional-looking website does not prove that it is genuine.

If you need to access your tax account, it is safer to navigate independently to HMRC online services through GOV.UK rather than typing an unfamiliar address from a suspicious letter.

5. There Is a Suspicious QR Code

The presence of a QR code does not automatically mean a letter is fraudulent. HMRC does use QR codes in some genuine correspondence.

However, HMRC states that QR codes in its letters will usually take you to guidance on GOV.UK. Where a code takes you elsewhere, HMRC should explain this. HMRC also says a QR code in its communications will not take you to a page requiring you to enter personal information.

You can check HMRC’s guidance on genuine QR codes if you are uncertain.

6. The Tax Details Do Not Match Your Records

Businesses should compare any unexpected demand against their accounting and tax records.

For example, if a letter claims that £8,000 of Corporation Tax is overdue but your accountant has confirmation that the liability was paid before the deadline, that discrepancy needs investigating before another payment is made.

Check relevant information such as:

  • the tax and accounting period;
  • the amount allegedly outstanding;
  • your UTR or other tax reference;
  • previous tax returns;
  • payment confirmations;
  • HMRC online account balances; and
  • previous correspondence with HMRC.

Bear in mind that HMRC’s records and online balances can sometimes take time to reflect recent payments or changes, so a discrepancy does not necessarily prove that a letter is fraudulent.

 Self Assessment Tax Return Service

Categories:

Get 50% off our services for the first 6 months when you sign up to one of our Pre-Built or Bespoke Packages!

Speak to an accounting expert

If you’re unsure what level of support you need, our friendly team are on hand to help you pick the right package for you.

0330 113 8442 Request Call Back

Newer Scam Tactics Layered on Top of Letters in 2026

Letters are rarely the whole story any more. HMRC-themed fraud has increasingly moved onto channels that would not have appeared in older scam guidance, and it is worth knowing what to watch for alongside the postal warning signs above.

  • WhatsApp impersonation: messages arriving from a number with an HMRC-style display name, sometimes paired with an official-looking profile picture, claiming a penalty is owed or a refund is due, with a link or callback number attached.
  • AI-generated “deepfake” voice calls: automated or AI-assisted calls that sound convincingly official, often used to follow up a letter and pressure a quick payment or disclosure of details.
  • Fake HMRC social media accounts: profiles set up to look official, sometimes used to add credibility to a letter or message by appearing to confirm it.

HMRC does not initiate contact about tax owed or refunds due over WhatsApp, and it will not ask for banking details or security codes through any messaging app. If a WhatsApp message, deepfake-style call or social media account is used to reinforce a suspicious letter, treat the whole approach as unverified until checked independently through GOV.UK.

How to Check Whether an HMRC Letter Is Genuine

One of the most useful resources is HMRC’s Check if a letter you’ve received from HMRC is genuine service.

HMRC maintains information about recent genuine letters and campaigns. As of September 2026, this includes correspondence covering areas such as Self Assessment, National Insurance, Corporation Tax, tax repayments and outstanding amounts.

However, HMRC makes clear that not every genuine communication will necessarily appear on its published list.

A sensible verification process is:

  1. Do not make an immediate payment. Take time to verify what you have received.
  2. Check the details against your records. Compare the tax period, liability, reference numbers and payment history with your accounting records.
  3. Check your HMRC online account. Access it independently through GOV.UK rather than through a link or QR code in the letter.
  4. Search HMRC’s genuine contact guidance. See whether the type of letter or campaign is listed.
  5. Speak to your accountant or tax adviser. They may already have received correspondence or be able to reconcile the alleged liability.
  6. Contact HMRC independently. Use contact information obtained directly from GOV.UK rather than relying solely on the telephone number printed on a suspicious letter.

HMRC also publishes a broader list of genuine HMRC contacts, covering letters, emails, phone calls and text messages.

Do Not Ignore a Letter Just Because You Think It Is a Scam

This is an important distinction.

A suspicious letter should not be acted upon until it has been verified, but it should not simply be thrown away either.

If the correspondence turns out to be genuine, ignoring it could cause a relatively straightforward tax issue to become more serious.

Depending on the circumstances, failing to respond to genuine HMRC correspondence could result in additional interest, penalties, debt recovery action or escalation of a compliance check.

For example, HMRC may genuinely write to a company if it believes there is an issue with a Company Tax Return or an outstanding liability. Some letters specifically require the taxpayer to check previous returns, correct an error or explain why the return is accurate.

If an HMRC letter looks suspicious, the safest approach is neither to ignore it nor to comply with it immediately. Verify it independently first.

What Should You Do If You Receive a Suspicious HMRC Letter?

HMRC’s guidance says that if you receive a suspicious letter, you should contact the HMRC team that the letter claims to be from. Importantly, find the appropriate contact details independently through GOV.UK.

Keep the original letter while you investigate. It may be useful when reporting the scam and can help HMRC understand how its identity is being misused.

If the letter is followed by a suspicious email, text, WhatsApp message, social media account or telephone call, those contacts can also be reported.

HMRC says suspicious emails can be forwarded to phishing@hmrc.gov.uk, while suspicious HMRC text messages can be forwarded to 60599. Fake HMRC social media or messaging-app accounts can be reported to branddefence@hmrc.gov.uk. Suspicious HMRC phone calls can be reported using HMRC’s online reporting service.

Full reporting instructions are available on the GOV.UK HMRC scam reporting service.

What If You Have Already Paid a Fake HMRC Demand?

If you realise that you may have sent money to a fraudster, act quickly.

Contact your bank or payment provider immediately and explain that you believe the payment was made as a result of fraud. Depending on the payment method and circumstances, they may be able to take action to try to recover or stop the funds.

You should also report the fraud through the appropriate official channels. GOV.UK provides guidance on reporting scams and phishing.

Keep copies of the letter, envelopes, payment details, bank transactions, emails, phone numbers and any other communications associated with the incident.

What If You Have Given Away Your HMRC Login Details?

A scam does not necessarily need to involve an immediate payment to cause financial damage.

Fraudsters may be trying to obtain access to your HMRC online account or collect enough information to commit identity fraud later.

If you think someone has gained access to your HMRC account, HMRC advises reporting the suspicious activity immediately and changing your password if you still have access.

Warning signs can include receiving access codes when you have not attempted to sign in, being unable to log in because your password has changed, unexplained changes to your tax records, or unexpected correspondence and payments.

HMRC provides dedicated guidance on reporting suspicious activity in an HMRC online account.

HMRC Scam Letters Targeting Limited Companies

Company directors need to be particularly careful because information about UK limited companies is publicly available through Companies House.

A fraudster does not necessarily need to hack your business to find its company name, registered office address, incorporation date or directors. Much of this information can legitimately be obtained from the public register.

That means a letter containing your correct company name and director details is not automatically genuine.

Scammers may also imitate organisations other than HMRC. Limited companies can receive misleading correspondence relating to company registers, renewals, business directories, domain names and other services.

When correspondence relates to your limited company, check information directly using the official Companies House service and GOV.UK where appropriate.

What About Genuine HMRC Debt Letters?

HMRC does genuinely contact individuals and businesses about overdue tax.

A real tax debt should not be ignored simply because you cannot afford to pay the full amount immediately.

First establish that the liability is genuine and that the amount agrees with your records. If it does, deal with the issue as soon as possible.

Depending on your circumstances and the tax involved, HMRC may be able to discuss payment arrangements. GOV.UK provides a dedicated service for taxpayers who owe money to HMRC.

Businesses experiencing cash-flow problems should speak to their accountant before allowing tax liabilities to accumulate. VAT, PAYE, Corporation Tax and Self Assessment debts can become more expensive once interest and applicable penalties are added.

Can HMRC Letters Contain Deadlines and Penalties?

Yes. The presence of a deadline, penalty or warning of further action does not by itself mean that a letter is fraudulent.

HMRC administers statutory filing and payment deadlines across the UK tax system. Genuine correspondence may therefore explain penalties, interest or further action that could result from failing to meet an obligation.

The key is to verify the underlying tax liability or compliance requirement independently.

If a letter refers to a missed Self Assessment deadline, for example, check your tax return submission record and Self Assessment account. If it concerns Corporation Tax, compare it with the company’s accounting period, Company Tax Return and payment records.

If you disagree with a genuine HMRC penalty or tax decision, do not simply ignore it. There may be a formal review or appeal process with a specific deadline.

How Businesses Can Reduce the Risk of HMRC Scams

HMRC fraud should form part of your wider financial controls, particularly if several employees have access to company email, post or banking.

Practical precautions include:

  • requiring unexpected tax payment requests to be independently verified before payment;
  • restricting access to Government Gateway and HMRC online accounts;
  • using strong, unique passwords and available account security measures;
  • keeping bookkeeping and tax records up to date so unexpected liabilities are easier to identify;
  • making sure staff know who normally deals with HMRC correspondence;
  • checking changes to bank details or payment instructions independently;
  • never sharing security codes or passwords with someone simply because they claim to represent HMRC;
  • keeping your accountant informed of unexpected HMRC correspondence; and
  • regularly reviewing HMRC online accounts for unfamiliar activity.

Good accounting records provide an additional layer of protection. If your bookkeeping, VAT returns, payroll records and tax payments are reconciled regularly, an unexpected demand is much easier to question.

A Practical Example

Imagine a limited company receives a letter stating that £4,750 of Corporation Tax is overdue and must be paid within 48 hours.

The letter looks professional and includes the company’s correct name, registered office and company number. It also provides a telephone number and QR code for immediate payment.

Rather than scanning the code, the director checks the company’s accounting records and sees that the Corporation Tax payment was made several weeks earlier.

The director then signs into the company’s HMRC account independently through GOV.UK and speaks to the company’s accountant. Finally, they use official HMRC contact information from GOV.UK to verify the position.

This process establishes whether the letter is genuine without making another payment or providing information to a potential fraudster.

The same principle applies even where the amount shown on a suspicious letter happens to correspond with a real tax liability. Correct information does not prove that the person asking for payment is HMRC.

Final Thoughts on Scam HMRC Communications

HMRC scam letters can be convincing because they imitate the type of correspondence businesses genuinely receive every day. A professional-looking logo, correct company details or an official-sounding tax reference should never be the only reason you trust a request for money or information.

At the same time, genuine HMRC correspondence should not be ignored. Tax debts, compliance checks, filing requirements and penalties can carry real deadlines and consequences.

The safest approach is simple: stop, check your records and verify the contact independently through GOV.UK before taking action.

If the letter is genuine, you can then deal with the tax matter properly. If it is fraudulent, you may have prevented a potentially costly scam.

Need Help With an Unexpected HMRC Letter?

Tax correspondence can be confusing, particularly when you are trying to work out whether a demand is genuine, whether a payment has already been made or whether HMRC’s records match your accounts.

If you receive an unexpected HMRC letter, avoid acting purely on the information contained within the letter. Check your records, verify the correspondence through official HMRC channels and speak to your accountant where appropriate.

At Accounting Wise, we help UK businesses, company directors and self-employed individuals manage their tax obligations, accounting records and HMRC correspondence. Having accurate, up-to-date accounts makes it much easier to identify when something does not add up.

Need help with dealing with the HMRC? Contact Accounting Wise Today!

Build Your Own Package Accounting Packages One Off Pricing

HMRC Scam Letter FAQs

0330 113 8442 Request Call Back

Check the details against your tax records and HMRC online account, then use HMRC’s published list of genuine contacts and letters. If you are still uncertain, contact the relevant HMRC department using contact details obtained independently from GOV.UK.

Yes. HMRC can genuinely write to taxpayers about outstanding tax, returns and other liabilities. The fact that a letter requests payment does not automatically make it fraudulent. Verify the amount and payment method independently before transferring money.

Yes. HMRC uses QR codes in some correspondence. According to HMRC guidance, they will usually direct users to GOV.UK guidance, and HMRC publishes information to help taxpayers check genuine QR codes. A QR code should therefore be verified rather than assumed to be genuine or fraudulent.

No. HMRC does not use WhatsApp to tell you that you owe tax or are due a refund. Treat any such message as a scam, regardless of how official the display name or profile picture looks.

If you have doubts about the letter, it is safer to obtain the relevant HMRC telephone number independently from GOV.UK rather than relying on the contact details supplied in the correspondence.

Check the alleged liability against your tax return, accounting records, payment history and HMRC online account. If the debt is genuine, deal with it promptly. If you cannot pay in full, contact HMRC to discuss the options available rather than ignoring the debt.

Yes. If your accountant is authorised to deal with the relevant tax affairs, they can often help establish whether the correspondence relates to a genuine liability or HMRC enquiry. Even where they cannot deal with a particular matter directly, they can help you compare the letter with your tax records.

Newsletter Subscription - Accounting Wise

Join Our Newsletter!

Get expert accounting tips, tax updates, and business insights straight to your inbox. Sign up today and stay one step ahead!

Newsletter Signup

Hot Topics

More related Accounting Community, News & Resources

Accounting Wise - is freelance the same as being self-employed

Is freelance the same as being Self-Employed

Freelancer and self-employed are often used as if they mean the same thing, but HMRC treats them differently. This article explains what separates the two, when you need to register for Self Assessment, and how Making Tax Digital now affects higher-earning sole traders.
Accounting Wise - self assessment records - what to keep and for how long

Self Assessment Records – What to Keep and for How Long

A practical guide to Self Assessment record keeping for sole traders and landlords, covering which records HMRC expects, retention periods, digital records and Making Tax Digital for Income Tax.
Accounting Wise - how to provide proof of income when you’re self-employed

How to Provide Proof of Income When You’re Self-Employed

When you are self-employed there is no employer to confirm what you earn, so lenders and landlords expect tax and financial records instead. This post goes over what might count as proof of income, how to get an SA302 from HMRC, what mortgage lenders look for and how good bookkeeping makes it all easier.
Online Company Formation Experts - Formations Wise
Right Right Company Formation

Company Formation

Free company formation with our Pre-Built or Bespoke Accounting packages!

All Official Documents

Manage Your Company Online

London Registered Office Address

Your own limited company

Accounting Software

Whatever your size, our accounting software supports your business.

Quotes & Payment Reminders  

MTD VAT & CIS Returns 

Payroll Services & HR Support 

Unlimited Support & Advice 

Balance Accounting Software - The Balance App
Right Right Accounting Software
Rated Excellent on Trust Pilot - Accounting Wise Logo

Get started with the right accounting solution for your business

Build Your Own PackageAccounting PackagesOne Off Pricing

Contact Us

Interested in Accounting Wise?

Request Call Back0330 113 8442

Accounting Wise is a trading style of Accounting Wise Ltd, a limited company registered in England under company number 09365202. Our registered office is: The Carriages, Station Road, Ware, SG12 9PL UK.

Content is for general information only. Always take advice.

Is freelance the same as being Self-EmployedAccounting Wise - is freelance the same as being self-employed