With the January 31st Self-assessment deadline approaching, HM Revenue and Customs (HMRC) has issued urgent warnings after confirming that over 4,800 tax scams were reported recently. As criminals intensify their efforts, are you prepared to spot the difference between a genuine request and a sophisticated fraud? These HMRC scams are designed to pressure taxpayers into revealing personal data or making bogus payments.
This article provides a clear guide to understanding these threats and protecting yourself. We will cover the most common types of Self-assessment scam, how to verify genuine HMRC communications, the exact steps for reporting fraud, and what to do if you think you've been targeted. Protecting your financial information is crucial, and knowing the scammers' tactics is the first line of defence.
The Rising Threat: Why Self-assessment Season is a Goldmine for Scammers
The period leading up to the 31st January Self-assessment deadline is a prime hunting ground for fraudsters. They thrive on the pressure and anxiety many taxpayers feel, creating a perfect storm for impersonation fraud. Scammers know that millions of people are expecting to interact with HMRC, making unexpected contact seem more plausible. They exploit this by manufacturing a sense of urgency, either by threatening penalties for supposed unpaid tax or by offering the tempting lure of a tax refund.
This isn't a small-scale problem. The latest figures show a concerted effort by criminals to target UK taxpayers. Modern HMRC scam warnings highlight the increasing sophistication of these attempts, which often involve cloned websites, spoofed email addresses, and highly convincing branding that mimics official correspondence. They are masters of psychological manipulation, pressuring you to act immediately without thinking. Understanding this context is key to building a healthy sense of scepticism towards any unsolicited contact regarding your tax affairs.
By the Numbers
HMRC reported that over 4,800 Self-assessment-specific scams had been flagged since February 2025. This is part of a wider trend that has seen more than 170,000 HMRC-related scams reported in the last year.
Genuine vs. Fake: How to Tell if HMRC is Really Contacting You
One of the biggest challenges taxpayers face is distinguishing legitimate communication from a fraudulent one. Scammers go to great lengths to appear official, but there are consistent red flags. HMRC has a clear set of protocols for how it contacts taxpayers, and knowing them is your best defence. The fundamental rule is to be suspicious of any unsolicited contact that asks for personal information or demands immediate payment. Before diving into the specifics of each communication channel, here is a quick overview of what to expect.
HMRC Will... | HMRC Will NEVER... |
|---|---|
Send letters to your registered address with your Unique Taxpayer Reference (UTR). | Leave a voicemail threatening legal action or immediate arrest or demand instant payment to stop legal proceedings. |
Send emails that provide general information or direct you to the secure GOV.UK portal. | Ask you to provide personal or financial information by email or text message or a QR code. |
Send text messages to remind you of deadlines or payments due. | Offer a tax refund or rebate via a clickable link in an email or text. |
Occasionally call you to discuss your tax affairs, but will happily end the call for you to phone them back on an official number. | Tell you to transfer money or demand immediate payment using unusual methods like gift cards, vouchers, or cryptocurrency. |
A common question is, 'do HMRC call you?'. Yes, they do, but their approach is vastly different from a scammer's. A genuine HMRC agent will introduce themselves, explain the reason for their call, and will not object if you want to verify their identity. They will never be aggressive, threatening, or demand immediate payment over the phone. If you receive a call that feels suspicious, especially if it comes from a mobile number, the safest course of action is to hang up. Do not trust the caller ID. Find an official HMRC helpline number from the GOV.UK website and call them back directly to verify the contact.
The Scammer's Playbook: Common HMRC Scams Targeting Taxpayers
Fraudsters rely on a few proven formulas designed to prey on fear and financial desire. Most scams targeting taxpayers, especially during the Self-assessment period, fall into one of three main categories.
The 'Tax Refund' or 'Rebate' Lure
This is perhaps the most common Self-assessment scam. You receive an email or text message informing you that you are due a significant tax refund from HMRC. The message will contain a link to a fake website that looks remarkably like the official GOV.UK portal. Once on this site, you are prompted to enter your personal and banking details to 'claim' your rebate. In reality, you are handing this sensitive information directly to criminals, who can then use it to empty your bank account or commit identity fraud. Remember, HMRC never notifies you of tax refunds via email or text.
The 'Immediate Legal Action' Threat
This aggressive tactic, known as 'vishing' (voice phishing), uses fear to bypass your rational judgment. You receive an automated voicemail or a direct call from someone claiming to be from HMRC. They will inform you that you have an outstanding tax debt and that a warrant has been issued for your arrest. They may threaten to send bailiffs to your home or initiate legal action immediately unless you make an instant payment. The goal is to create panic, preventing you from thinking clearly and verifying the claim. HMRC will never use such threatening and intimidating methods.
The 'Update Your Details' Phishing Email
This phishing scam is more subtle. You receive an email claiming that there is an issue with your Self-assessment account or that your details are out of date. It will instruct you to click a link to a fake GOV.UK or HMRC login page to verify or update your information. When you enter your Government Gateway user ID and password, the criminals capture these credentials. This gives them access to your real tax account, allowing them to file fraudulent returns, alter your details, or gain access to a wealth of personal information that can be used for wider fraud.
Your Action Plan: How to Report an HMRC Scam
Reporting suspicious activity is vital. It not only protects you but also helps HMRC and law enforcement agencies to track down scammers and shut down their operations. By taking a few moments to report a potential scam, you can prevent others from becoming victims. The process is straightforward and there are dedicated channels for each type of fraudulent communication.
📝 How to Report a Suspicious HMRC Message
Reporting Suspicious Emails
If you receive an email you suspect is a phishing attempt, do not reply to it or follow any of its instructions. The most helpful action you can take is to forward it to phishing@hmrc.gov.uk. HMRC's security team can analyse the email, which helps them to identify and take down the fraudulent websites associated with the scam. After forwarding it, you should delete the email from your inbox.
Reporting Scam Text Messages
For suspicious text messages, the process is just as simple. Forward the message to the short code 60599. Note, network charges may apply. This allows mobile providers to investigate the origin of the text and block the number, preventing it from being used to target more people. Once you have forwarded the message, you can delete it.
Reporting Fraudulent Phone Calls
While it can be unsettling to receive a threatening phone call, reporting it helps authorities build a case against the perpetrators. Note down the phone number that called you, along with the date and time of the call. You can then report this information to HMRC using their online reporting service. This information is crucial for tracking and disrupting these vishing operations.
What to Do If You've Fallen Victim to a Scam
Realising you may have been tricked by a scammer can be incredibly stressful, but it's important to act quickly and calmly. Taking immediate steps can significantly limit the damage and protect you from further harm. There are clear actions you should prioritise.
First and foremost, contact your bank or credit card provider immediately. If you have provided any financial details, they can place a block on your accounts, cancel cards, and monitor for any suspicious transactions. They have dedicated fraud departments that can guide you through the next steps to secure your finances.
Next, report the incident. Even if you feel embarrassed, it's crucial to report it to Report Fraud, the UK's national reporting centre for fraud and cybercrime.. You should also report it directly to HMRC using their official channels. This ensures that the incident is officially logged and investigated.
Finally, focus on your data protection. If you revealed any passwords, change them immediately on all accounts that use the same or similar credentials. Be extra vigilant about any follow-up emails, calls, or texts, as criminals may try to target you again. For anyone needing support with their tax affairs after such an incident, seeking professional help from a qualified accountant can ensure your Self-assessment tax return is filed correctly and securely.
The biggest red flags are urgency and threats. Scammers will pressure you to act immediately. Other signs include unexpected contact offering a tax refund, requests for personal or financial information via email or text, poor spelling and grammar in messages, and links that direct you to websites that are not on the official GOV.UK domain.
Look for generic greetings like 'Dear Sir/Madam' instead of your name. Check for a specific tax reference number, such as your UTR; its absence is a warning sign. Be highly suspicious of any letter that pressures you to make a payment to a non-HMRC bank account.
According to GOV.UK, the safest way to verify a letter from HMRC is to log in to your personal tax account through the official GOV.UK website or use the official phone numbers listed on their site for confirmation. For specific contact details, including email addresses for your query, visit the HMRC Contact page on GOV.UK.?
Genuine emails from HMRC will always come from an address ending in '@hmrc.gov.uk' or '@gov.uk'. However, be aware that scammers can sometimes 'spoof' an address to make it look legitimate. Therefore, it's more important to judge the content of the email. Never click links or provide personal data in response to an email, even if the sender's address looks correct.
Do not trust your phone's caller ID, as numbers can be easily faked. The most secure method is to politely end the call, stating that you will contact HMRC directly. Then, find an official phone number on the GOV.UK website and call them yourself. A genuine HMRC agent will understand and will not pressure you to stay on the line.
You should forward any suspicious emails to HMRC's dedicated cybercrime team at phishing@hmrc.gov.uk. Do not interact with the email in any other way. Reporting it helps HMRC investigate and take action against the criminals behind the scam.
Act immediately. First, contact your bank to secure your accounts and cards. Second, report the incident to Action Fraud and call HMRC’s Fraud Hotline at 0800 788 887, which is open Monday to Friday, 9am to 5pm (except bank holidays).Third, change any passwords that may have been compromised, especially for your Government Gateway account. Finally, monitor your bank statements and credit reports closely for any unusual activity.
Conclusion
HMRC scams, particularly those targeting Self-assessment taxpayers, are a persistent and growing threat. However, they are also avoidable. The key to protecting yourself is to remain vigilant, to question any unsolicited contact, and to understand that HMRC will never use pressure or threats to discuss your tax affairs. Never feel rushed to act on an email, text, or phone call. Always take a moment to pause and verify any communication through official GOV.UK channels. By knowing the red flags and the official procedures, you can confidently distinguish genuine contact from a fraudulent attempt to steal your money and data. Remember to report all suspicious activity to help protect the wider community.
Unsure about an HMRC communication?
If you're unsure about a communication you've received or need help ensuring your Self-assessment is compliant and secure, speak to our specialist today.
- Could the Autumn Budget 2026 Bring Down the UK Mansion Tax Threshold to £1.5m? - 25 September 2026
- The Bank of England Interest Rate Stays at 3.75%. But Here’s the Catch - 18 September 2026
- The North Is Now the Fastest UK Rent Growth Region. Here’s What That Does to Rental Yields - 17 September 2026
