Receiving a letter claiming to be from HM Revenue and Customs (HMRC) can be worrying, especially when it mentions unpaid tax, a refund, or possible penalties. While HMRC sends genuine letters about tax matters, criminals may also impersonate the department to obtain money or personal information.
Knowing how to identify a suspicious HMRC letter can help you protect your finances, avoid unnecessary stress, and take the right steps before responding.
In this guide, we explain the common warning signs of an HMRC scam letter, how to verify whether correspondence is genuine, and what to do if you receive a suspicious notice.
*What Is an HMRC Scam Letter?
*
An HMRC scam letter is fraudulent correspondence designed to look as though it has been sent by the UK's tax authority. Scammers may attempt to convince individuals or businesses that they owe tax, qualify for a refund, or must take urgent action to avoid legal consequences.
These letters may use official-looking logos, formal language, reference numbers, and other details to appear legitimate.
Some scams target individuals, while others may target self-employed people, company directors, and small businesses.
It is important to remember that a letter should not be considered genuine simply because it looks professional or includes personal information.
*7 Warning Signs of an HMRC Scam Letter
*
- Unexpected Demands for Immediate Payment
One warning sign is a demand for immediate payment accompanied by threats of arrest, legal action, or severe penalties unless you pay straight away.
Scammers often use pressure to prevent people from checking whether a request is legitimate.
If a letter demands urgent payment, pause and verify the information through an official HMRC channel before taking action.
- Suspicious Payment Instructions
Be cautious if a letter asks you to transfer money to an unfamiliar bank account, use an unusual payment method, or pay through a link you cannot independently verify.
Do not assume that a payment request is genuine because the letter displays the HMRC name or logo.
Check any alleged tax liability through your official HMRC account or contact HMRC using independently verified contact details.
- Requests for Sensitive Personal Information
Fraudulent letters may ask for information such as:
- Bank account details or payment card information.
- Government Gateway login credentials.
- Passwords or security codes.
- Copies of identity documents without a clear, verified reason.
Never disclose passwords or security codes in response to an unsolicited request. If you are unsure whether information is required, contact HMRC through its official website.
- Unexpected Tax Refund Claims
Some scam letters claim that you are entitled to a tax refund and must provide personal or banking information to receive it.
The promise of receiving money can make these messages appear attractive and convincing.
Do not follow a QR code, click a link, or call a number printed in a suspicious letter to claim a refund. Instead, check your tax position through official HMRC services.
- Unusual Contact Details
Look carefully at the contact information provided in the letter.
Warning signs may include:
- An unfamiliar website address.
- A telephone number that cannot be verified independently.
- An email address that does not match the claimed organisation.
- A QR code directing you to an unexpected website.
However, unusual contact details are not the only warning sign, and professional-looking contact information does not prove that a letter is authentic.
- Incorrect or Inconsistent Information
A suspicious letter may contain spelling mistakes, awkward wording, incorrect personal details, or references that do not match your circumstances.
These details can be useful warning signs, but their absence does not guarantee authenticity. Fraudulent correspondence can be carefully written and personalised.
Always verify important claims independently rather than relying on the letter's appearance.
- Pressure to Ignore Verification
Be particularly cautious if a letter discourages you from contacting HMRC directly or insists that you must use only the contact details provided in the correspondence.
A legitimate tax concern should be checked through appropriate official channels. You should not have to rely solely on the instructions in a letter whose authenticity is uncertain.
*How to Check Whether an HMRC Letter Is Genuine
*
If you receive a suspicious letter, follow these steps before making a payment or sharing personal information.
Step 1: Read the Letter Carefully
Identify what the letter claims, including any alleged tax debt, refund, deadline, or request for information.
Check whether the details make sense in relation to your tax affairs. Do not treat a reference number, logo, or official-looking format as proof of authenticity.
Step 2: Visit the Official GOV.UK Website
Use the official HMRC guidance to learn how to recognise suspicious contact:
You can also find official information about reporting suspicious HMRC communications:
These resources can help you understand the appropriate verification and reporting process.
Step 3: Contact HMRC Independently
Do not rely on a telephone number, web address, or QR code supplied in a suspicious letter.
Instead, find HMRC's contact details through GOV.UK and use the appropriate official service. Explain what the letter says and ask whether the correspondence or alleged tax liability can be verified.
If the letter concerns a tax return, payment, or refund, check your relevant official tax account where appropriate.
Step 4: Keep the Letter and Related Evidence
Keep the original letter and make a note of when and how you received it. If you have already interacted with the sender, preserve relevant emails, messages, payment details, and other evidence.
This information may help HMRC or another relevant organisation investigate the matter.
*What Should You Do If You Receive an HMRC Scam Letter?
*
The appropriate response depends on what has happened.
If you have only received the letter: Do not make a payment or disclose sensitive information until you have verified the request.
If you have clicked a link: Close the suspicious page and avoid entering further information. If you downloaded a file, take appropriate steps to check your device's security.
If you have shared your login details: Change compromised passwords using the genuine service, secure any affected accounts, and follow the official reporting guidance.
If you have shared banking details or sent money: Contact your bank immediately using its official contact details. Explain what happened and ask what protective action is available.
If you believe the letter is fraudulent: Follow HMRC's official guidance for reporting suspicious correspondence. Keep any evidence that may be useful.
Taking action quickly can help limit potential financial loss or misuse of personal information.
How Small Businesses Can Protect Themselves
HMRC-related scams can also affect businesses, particularly where employees handle tax correspondence, payroll, invoices, and financial administration.
Businesses can reduce their exposure by adopting a few practical measures:
- Verify unexpected tax payment requests independently.
- Limit access to sensitive financial and tax information.
- Train employees to recognise impersonation and phishing attempts.
- Use secure processes for approving payments and changing supplier or bank details.
- Keep relevant financial records and correspondence organised.
- Make sure staff know how to report suspicious communications internally.
A clear verification process can help prevent one misleading letter from resulting in an unnecessary payment or data breach.
Where Can You Find More Guidance on HMRC Scam Letters?
If you need additional information about identifying suspicious HMRC correspondence, you can read this guide to HMRC scam letters from SAS Accountants.
You should also consult the official GOV.UK resources linked above when checking a specific letter or deciding how to report suspected fraud.
Frequently Asked Questions
Can an HMRC scam letter look genuine?
Yes. Fraudulent letters may use official-looking logos, formal language, reference numbers, and personal details. Appearance alone cannot establish whether a letter is genuine.
Should I pay tax requested in a suspicious letter?
Do not pay solely on the basis of an unverified letter. Check the alleged liability through official HMRC channels before taking action.
What if the letter contains my correct name and address?
Correct personal information does not prove that the letter is genuine. Verify the request independently before sharing additional details or making a payment.
How do I report a suspected HMRC scam?
Follow the instructions on the official GOV.UK page for reporting suspicious HMRC messages and other scam communications. Use the reporting route appropriate to the type of contact you received.
Can a genuine HMRC letter contain a deadline?
Yes. Genuine tax correspondence may contain deadlines and requests for action. The presence of a deadline does not automatically make a letter fraudulent, which is why independent verification is important.
Final Thoughts
An HMRC scam letter can cause confusion, anxiety, and potentially financial loss. Recognising suspicious payment demands, unexpected refund offers, requests for sensitive information, and unusual contact details can help you identify possible fraud.
However, no single warning sign can establish that a letter is fraudulent. The safest approach is to verify the correspondence through official HMRC channels before responding.
If you receive a letter that concerns you, take your time, protect your personal information, and consult reliable official guidance. A few careful checks can help you make an informed decision and reduce the risk of falling victim to a scam.
Top comments (0)