How to Spot HMRC and Tax Scams and How to Keep Safe
HM Revenue & Customs (HMRC) scams are a common form of fraud where criminals impersonate tax authorities to trick people into paying fake tax bills, sharing personal information, or giving access to financial accounts.
These scams often arrive at stressful times of the year—such as tax return deadlines—when people are more likely to panic and act quickly without checking the details.
Understanding how HMRC scams work can help protect you, your finances, and your identity.
What Is an HMRC or Tax Scam?
An HMRC scam happens when criminals pretend to be from HMRC or another tax authority and claim you owe money or are due a refund.
They may contact you by:
- Text message
- Phone call
- Voicemail
- Fake letters or documents
The scammer may say you must:
- Pay unpaid tax immediately
- Confirm personal details
- Claim a tax refund
- Avoid legal action or arrest
In reality, HMRC will never behave in the aggressive or threatening way used by scammers.
How HMRC Scams Work
HMRC scams usually follow a pattern:
- You receive a message claiming there is a tax issue.
- The message creates urgency or fear.
- You are asked to click a link, call a number, or make a payment.
- You are directed to a fake website or scammer-controlled phone line.
- Personal or financial information is stolen, or money is paid to criminals.
Some scams also use fake HMRC branding to appear legitimate.
Common Types of HMRC Scams
Fake Tax Refund Scams
Victims are told they are due a tax refund and must click a link to “claim it.” The link leads to a fake website designed to steal banking details.
Tax Debt Threat Scams
Scammers claim you owe unpaid tax and threaten:
- Arrest
- Legal action
- Fines
- Asset seizure
They demand immediate payment to avoid consequences.
National Insurance Number Scams
You may be told your National Insurance number has been compromised or suspended, and you must “verify” your identity.
Fake HMRC Phone Calls
Scammers call pretending to be HMRC officers and pressure victims into paying or sharing personal details.
Text Message Phishing (Smishing)
Messages may include links claiming to be from HMRC, asking you to log in or confirm information.
Warning Signs of an HMRC Scam
If you notice several of these signs, the message is likely fraudulent.
Unexpected Contact About Tax Issues
HMRC does not usually contact people out of the blue to demand immediate payment or personal information.
Threats of Arrest or Legal Action
Scammers often say:
- “You will be arrested if you do not pay.”
- “Legal action will be taken immediately.”
- “Police will be informed.”
HMRC does not threaten arrest in this way.
Pressure to Act Immediately
Urgency is a key tactic, with messages such as:
- “Pay within 24 hours.”
- “Immediate action required.”
- “Failure to respond will result in penalties.”
Requests for Unusual Payment Methods
Be suspicious if you are asked to pay via:
- Gift cards
- Cryptocurrency
- Money transfer services
- Direct bank transfer to an unknown account
HMRC does not request payments in these ways for normal tax matters.
Links to Fake Websites
Scam emails or texts often contain links that look similar to official government websites but contain slight differences in spelling or domain names.
Requests for Sensitive Information
HMRC will never ask for:
- Passwords
- Full bank PINs
- One-time security codes
- Complete card details
Why HMRC Scams Work
These scams succeed because tax matters are serious and often stressful. Many people fear penalties or legal consequences, so they react quickly when contacted.
Scammers exploit this fear to push victims into making rushed decisions without verifying the information.
They also use official-looking branding and realistic language to appear trustworthy.
How Family and Friends Can Help
If someone you know receives a tax-related message:
- Encourage them to stay calm and not respond immediately.
- Suggest checking their official HMRC account directly.
- Remind them that HMRC will not demand instant payment by phone or text.
- Help them verify any claims using official government contact channels.
- Offer to review suspicious emails or messages with them.
A second opinion can prevent costly mistakes.
How to Keep Safe
Go Directly to Official HMRC Services
Always access your tax account by typing the official website address directly into your browser rather than clicking links in messages.
Be Sceptical of Urgent Messages
Treat any message demanding immediate payment or action with caution.
Never Share Security Codes
Do not share one-time passwords or login codes with anyone claiming to be from HMRC.
Check Contact Details Carefully
Look for spelling errors, unusual email addresses, or unofficial domains.
Use Strong Account Security
Protect your accounts with:
- Strong, unique passwords
- Two-factor authentication where available
Verify Independently
If you are unsure, contact HMRC directly using official contact information from their website.
What To Do If You’ve Been Scammed
If you think you have been targeted or have made a payment:
- Stop all communication with the scammer.
- Contact your bank immediately to report fraud.
- Change any passwords you may have shared.
- Report the scam to the relevant tax authority and fraud reporting service in your country.
- Keep copies of all emails, texts, and messages as evidence.
- Monitor your financial accounts for unusual activity.
Acting quickly can help reduce financial loss.
Final Thoughts
HMRC scams are effective because they exploit fear, authority, and urgency. By pretending to be a trusted government agency, scammers pressure victims into making fast decisions that bypass normal caution.
The most important defence is to slow down and verify independently. Legitimate tax authorities will not threaten arrest, demand immediate payment through unusual methods, or pressure you into sharing sensitive information.
If someone you know receives a suspicious tax message, encourage them to pause, check the facts, and seek advice before taking any action. A few minutes of caution can protect against serious financial and identity-related harm.