An HMRC scam is a fraudulent attempt by criminals to trick you by pretending to be from HM Revenue and Customs (HMRC). These scams often involve fake emails, texts, or phone calls offering a tax refund or threatening arrest to steal your personal or financial information.
HMRC is warning small business owners to be vigilant for scams, especially as the Self Assessment deadline approaches. With nearly 170,000 tax scams reported in the 12 months to 31 July 2025, it’s crucial to know how to identify and report them.
170k
scams reported
46k
fake tax refund claims
12%
decrease from last year
How can you spot a fake HMRC scam?
You can spot a fake HMRC scam by looking for several key warning signs. Scammers often use generic greetings, create a false sense of urgency, include suspicious links or attachments, and use email addresses that look official but aren’t.
A genuine HMRC email will always come from an address ending in @hmrc.gov.uk.
Here are five common signs of an HMRC scam:
- Fake HMRC email address: fraudsters use email addresses that seem official – including words like ‘Revenue’ or ‘HMRC’. Always hover over the sender’s address to reveal the true source, which won’t end in @hmrc.gov.uk if it’s a scam.
- Tax rebate offers: HMRC will never notify you of a tax rebate or refund over email. Any unsolicited email offering a tax refund scam is fraudulent.
- Urgent requests: scammers often pressure you with phrases like ‘urgent action required’ or ‘you only have three days to respond’. HMRC rarely demands immediate action without prior notice.
- Suspicious links and attachments: never click links or open attachments in unexpected emails. These can lead to fake websites designed to steal your details or install viruses on your computer.
- Generic greetings: be wary of emails that start with ‘Dear customer’ or ‘Hello’ instead of your name. HMRC will typically address you personally in their communications.
How do you know if an HMRC email is genuine?
A genuine HMRC email will never ask for personal or financial information like your bank details or passwords. While HMRC does email taxpayers, it’s usually for specific, non-sensitive reasons.
Genuine emails from HMRC may include:
- an alert that your annual tax summary is ready
- confirmation after you sign up for Making Tax Digital (MTD)
- promotional information about the personal tax account
- reminders about VAT returns or registration
- informational guides, links to webinars, or employer bulletins
Always check the full list of genuine HMRC communications on the UK government website
Will HMRC ever call you on the phone?
Yes, HMRC may call you, but usually in specific situations like debt management or for pre-arranged research purposes. If you’re behind on payments, you might receive a voice prompt on your landline or mobile.
However, be cautious of unexpected calls. Scammers often use phone calls to create a sense of urgency and pressure you into sharing sensitive information. If you feel pressured, hang up.
You can always verify the call by finding HMRC’s official contact details on the government website and calling them back directly.
Can you get an HMRC scam by text message?
Yes, scammers use text messages to target taxpayers. Like emails, a fraudulent HMRC scam text might offer a tax rebate or ask for personal details.
HMRC does send texts for legitimate reasons, such as requesting payment for overdue returns or asking you to update your contact details. However, these texts will direct you to the government website or ask you to call an official HMRC number. They will never ask for your bank details in a text.
HMRC might also text you about tax credits, surveys, and other claims – see the full list of text contacts here.
How do you report an HMRC scam?
If you receive a suspicious email, text, or call, you should report it to HMRC immediately. Reporting scams helps HMRC and other organisations track and stop fraudsters.
- to report a phishing email: forward the suspicious email to [email protected]
- to report a scam text message: forward the text to 60599 (this is a free service)
- to report a scam phone call: report the incident using HMRC’s online form.
If you’ve accidentally shared personal or financial details, contact your bank and other relevant financial institutions immediately. You can also get help from ActionFraud and Citizens Advice.
HMRC scams FAQs
What is a phishing email?
A phishing email is a type of scam where fraudsters send fake emails pretending to be from a legitimate organisation, like HMRC, to trick you into revealing personal information such as passwords and bank details.
Will HMRC send a tax refund by email?
No, HMRC will never send a notification of a tax refund or rebate by email. Any email you receive claiming to offer a tax refund is a scam.
What should I do if I’ve already clicked a link in an HMRC scam email?
If you’ve clicked a link or provided personal details, you should contact your bank immediately to secure your accounts. You should also run a virus scan on your computer and report the incident to ActionFraud.
Useful small business guides
- Best payroll software for small businesses in the UK
- How to register as self-employed with HMRC
- Tax dates for the self-employed
- What is business insurance?
Ready to set up your cover?
As one of the UK’s biggest business insurance providers, we specialise in public liability insurance and protect more trades than anybody else. Why not take a look now and build a quick, tailored quote?