• Home
  • >
  • Blogs
  • >
  • HMRC Tax Investigations UK 2025/26: Everything You Need to Know

HMRC Tax Investigations UK 2025/26: Everything You Need to Know

Published By Samikshya Basnet
Published Date: February 5, 2026

( Last Updated: March 17, 2026 )

A practical guide to compliance checks, enquiries, penalties, and how to protect yourself.

An HMRC tax investigation means a civil compliance intervention where HMRC checks that the right amount of tax has been paid and that returns, claims and supporting records are accurate. HMRC generally refers to these as compliance checks. In UK, Self-Assessment, HMRC may also open a formal enquiry into a return within the statutory enquiry window. Most UK cases are resolved through civil processes, but where HMRC suspects fraud, the case can escalate into specialist fraud procedures.

This guide explains in the UK for 2025/26 how checks are triggered, what HMRC can ask for, how far back HMRC can go, the main penalty regimes, and the practical steps that help keep you safe.

It is general information, not a substitute for tailored advice on your circumstances.

What HMRC means by ‘compliance check’ and ‘enquiry’

A compliance check is HMRC’s umbrella term for reviewing a taxpayer’s position. The format varies by tax and by risk. For Self-Assessment, HMRC can open a formal enquiry into a tax return. For VAT and PAYE, HMRC may carry out assurance work, targeted reviews or visits. For companies, HMRC may open a Corporation Tax enquiry into a Company Tax Return.

  • Compliance check - HMRC’s broader term for checking whether the right tax has been paid and the right reliefs have been claimed.
  • Enquiry - A formal process with statutory rules (for example a Self Assessment enquiry into a filed return).
  • Civil vs fraud route - Most checks are civil. If HMRC suspects fraud, it may use COP9 (the Contractual Disclosure Facility) or, in serious cases, a criminal investigation.

When and Why HMRC opens a check

HMRC opens checks on a risk basis. Some are random, but most are prompted by risk signals from HMRC’s data, comparisons, or third-party information.

  • Unusual repayment or loss claims, or repeated repayment positions.
  • Mismatches between your return and information held by HMRC (for example RTI payroll data, CIS returns, bank interest, platform data or information from other bodies).
  • Figures that do not align with industry norms or with your own history (significant swings year on year).
  • Large or unusual transactions (property sales, share disposals, business acquisitions, director loans, major one-off expenses).
  • Inconsistencies between different returns (for example VAT turnover not aligning with accounts or Self Assessment figures).
  • Third-party reports and intelligence.

A check can start narrowly (one issue or one period) and expand if HMRC identifies wider risks. A good early response is to clarify scope, provide a tidy evidence pack, and keep communications controlled.

What the process looks like

Most checks are handled by correspondence and follow-up questions. HMRC may communicate by letter, phone and, increasingly, through digital channels. Where it helps HMRC understand your records and systems, a visit or meeting may be arranged.

  • Opening letter - Confirms the tax, period(s) and the focus areas, and asks for information by a deadline.
  • Information gathering - HMRC asks questions and requests documents. The ‘reasonably required’ test is key. The ‘reasonably required’ test is legal limit on what HMRC can demand under an information notice issued under schedule 36 Finance Act 2008.
  • Discussion and clarification - Often a call or meeting to understand context and reconcile figures.
  • Proposed findings - HMRC sets out its view, the tax effect and any penalties, and invites comments.
  • Closure - Agreement and payment plan, or a decision you can request to be reviewed or appealed.

Sample of Opening letter

Types of HMRC checks you should recognise

Common investigation formats include:

  • Return enquiries (eg: a formal enquiry into a Self Assessment return).
  • Aspect checks (HMRC tests one area, such as business mileage, CIS, VAT partial exemption, or a particular relief).
  • Full checks (a wider review of records and overall tax position).
  • Repayment checks (HMRC tests the validity of a repayment claim before releasing funds).
  • Employer/PAYE and benefits reviews (payroll operation, benefits in kind, expenses).
  • VAT assurance visits and control checks (records, VAT account, invoices, digital record keeping).
  • Fraud procedures (COP9/Contractual Disclosure Facility) or criminal investigation in serious cases.

What HMRC can request (and the limits)

HMRC has statutory information powers. In many cases, HMRC requests information informally first. Where necessary, HMRC can issue an information notice requiring a taxpayer (or, in defined circumstances, a third party) to provide information or produce documents. The key limiter is that the information or document must be reasonably required to check the tax position.

  • Information notices can cover documents and explanations needed to check the return position, underlying records and computations.
  • There are safeguards and, depending on the notice and circumstances, appeal routes. It is often possible to narrow over-broad requests by agreeing scope and sequencing.
  • HMRC may request access to accounting systems and digital records, particularly for VAT and payroll.

Remember

Keep responses factual, indexed and complete. If a request feels too wide, address it promptly by asking HMRC to explain how the item is relevant and by proposing a narrower set that still meets the check objective

Records and evidence: how to support your return

Records and evidence how to support your return - hmrc tax investigations

HMRC will expect a clear audit trail from the tax return back to source evidence. Strong evidence is usually created at the time of the transaction and can be independently verified.

  • Bank statements and business bank feeds.
  • Sales records, till reports, platform statements and contracts.
  • Purchase invoices and receipts (including VAT invoices where input tax is claimed).
  • Payroll records, RTI submissions, P11Ds and expense policies.
  • Letting agent statements, tenancy agreements and completion statements for property transactions.
  • Workings that reconcile accounts and ledgers to the tax return figures.

Where records are missing or incomplete, HMRC may accept reconstructed evidence, but the risk of estimates, challenge and penalties increases. If estimates are unavoidable, label them clearly, explain the method and assumptions, and update the figures when better information becomes available.

How far back HMRC can go: enquiry windows and assessment time limits

Time limits are an important protection and a common dispute point. Different taxes have different rules, and the applicable time limit often depends on behaviour (reasonable care, careless, or deliberate). HMRC may also use ‘discovery’ assessments where statutory conditions are met and the assessment is in time. 

To put simply, HMRC must have identified that tax has been underpaid and, where a tax return has already been filed, must generally show either that the underpayment was caused by careless or deliberate behaviour, or that an HMRC officer could not reasonably have been expected to spot the issue from the information already available at the time (the “officer awareness” test). Cases have also raised “staleness” arguments, meaning HMRC waited too long after making the discovery, although HMRC’s published position is that staleness does not invalidate an otherwise in-time discovery assessment.

For Self Assessment, HMRC can normally open an enquiry within the enquiry window after the return is filed. Broadly, this is up to 12 months after the statutory filing date (or, if later, 12 months after the return is delivered). If you amend a return, that can affect the position: where the normal enquiry window is still open, HMRC can enquire into the return (including the amendment) in the usual way, but where the normal window has already closed, a valid amendment can give HMRC a further opportunity to open an enquiry, typically focusing on the amendment and anything that flows from it. If HMRC seeks to assess older periods, the analysis often turns on what information was made available to HMRC at the relevant time and whether the statutory conditions for assessment are met.

Tax Implications to the Freeholder

Tax

Normal time limit

Careless Behaviour

Deliberate behaviour

Notes

Income Tax and Capital Gains Tax

4 years

6 years

20 years

A longer 12-year limit can apply for certain offshore matters.

Corporation Tax

4 years

6 years

20 years

Separate rules apply for enquiry windows and for cases where a return is not delivered.

VAT (assessments)

Up to 4 years

Up to 4 years (plus other rules)

Up to 20 years in certain cases

Four years is the general maximum under VAT assessment powers, except where the statutory 20-year rule applies. Timing can also depend on when HMRC has evidence of facts sufficient to justify an assessment.

Here, Careless behaviour means a tax return or claim is wrong because the person did not take reasonable care, for example they failed to keep proper records, did not check figures before filing, or made a claim without taking sensible steps to confirm the correct tax treatment when it was unclear.

Deliberate behaviour means the return or claim is wrong on purpose, in the sense that the person knew a figure or tax treatment was incorrect (or knew something should have been declared) but chose to submit it that way anyway, for example leaving out known income, inflating expenses, or claiming reliefs they know they are not entitled to. If they also take steps to hide it, such as creating or providing false invoices or altering records, HMRC may treat it as deliberate and concealed.

What is “Offshore matter”?

An offshore matter is where the tax issue is connected to something outside the UK, for example income arising overseas (such as foreign rental income or interest on an overseas bank account), or assets held abroad (such as overseas property or investments).

Is “Offshore Matter” and “Offshore Transfer” same?

An offshore transfer is slightly different: it is where the income or sale proceeds may have arisen in the UK, but they were paid into, moved to, or received in an overseas account or overseas location, so the money (or assets representing it) ends up offshore. These bring the 12-year assessment time limit into play for Income Tax and Capital Gains Tax in certain cases, even though the standard limits are usually 6 years in case of Careless behviour.

HMRC tax investigation penalties, interest and outcomes

If HMRC concludes that tax has been underpaid or a repayment has been overclaimed, it may charge additional tax and statutory interest. Penalties depend on the type of failure, behaviour, and the quality and timing of disclosure. Identifying the correct penalty regime early is essential.

Penalty map: which situation uses which regime

Situation HMRC identifies

Typical penalty regime

What HMRC looks at

Wrong figures/claims in a return or document (tax understated or repayment overstated)

Inaccuracy penalties (Schedule 24 Finance Act 2007)

Behaviour (careless or deliberate), prompted vs unprompted disclosure, quality of disclosure

Tax was due but the person did not notify chargeability or register when required

Failure to notify (Schedule 41 Finance Act 2008)

Behaviour, timing of disclosure, reasonable excuse; different minimums may apply

Return filed late (for example Self Assessment)

Late filing penalties (for example Schedule 55 Finance Act 2009)

How late; daily penalties; reasonable excuse

Tax paid late (for example Self Assessment)

Late payment penalties (for example Schedule 56 Finance Act 2009)

How late; whether a Time to Pay arrangement exists; reasonable excuse

Records incomplete or inadequate systems

Record-keeping failures can drive estimates and can support penalties in other regimes

Whether records meet statutory requirements; remedial actions and controls

Penalty map: which situation uses which regime

Behaviour

Unprompted disclosure

Prompted disclosure

Careless

0% to 30%

15% to 30%

Deliberate (not concealed)

20% to 70%

35% to 70%

Deliberate and concealed

30% to 100%

50% to 100%

Unprompted Disclosure

Telling HMRC about an inaccuracy, underpayment, or overclaimed repayment before HMRC has contacted you about checking that specific issue, tax, or period.

Prompted Disclosure

Disclosing the issue after HMRC has started a compliance check or enquiry or has contacted you in a way that makes it reasonable to think they are looking at your position (even if they have not yet identified the exact error).

Note

Higher ranges can apply for certain offshore inaccuracies. Where behaviour is careless, HMRC may suspend all or part of a penalty if practical conditions can be set that would help prevent a repeat careless inaccuracy. Suspension is not available for deliberate behaviour.

Self Assessment late filing and late payment: Penalties

In the UK Self Assessment system, HMRC charges penalties separately for late filing of the tax return and late payment of the tax due. Late filing penalties are triggered automatically once the filing deadline is missed, even if there is no tax to pay, and they increase the longer the return remains outstanding. Late payment penalties and interest apply if the tax is not paid by the due date, and these build over time based on how late the payment is and how much remains unpaid.

The table below summarises the main penalty points and time thresholds, but the exact position can vary in certain cases, such as where a taxpayer has a reasonable excuse or where the outstanding balance is later corrected.

Late filing (Self Assessment)

Penalty

1 day late

£100

3 months late

£10 per day (up to £900)

6 months late

5% of tax due or £300 (whichever is higher)

12 months late

An additional 5% of tax due or £300 (whichever is higher)

30 days late

5% of unpaid tax

6 months late

Additional 5% of unpaid tax

12 months late

Additional 5% of unpaid tax

Interest runs separately on late paid tax. If cash flow is an issue, it is usually better to engage early with HMRC about Time to Pay rather than wait for enforcement or penalty escalation.

How to deal with HMRC during an investigation:

Early actions (first week)

  1. 1
    Read the opening letter carefully and confirm the tax head and periods in scope.
  2. 2
    Preserve records immediately. Do not delete or overwrite accounting, payroll or bank data.
  3. 3
    Build an indexed evidence pack: bank statements, sales records, purchase invoices, payroll records, VAT account and workings (where relevant), contracts and key schedules.
  4. 4
    Reconcile return figures to source records and prepare short explanations for differences.
  5. 5
    Keep communications controlled: one point of contact, agreed deadlines, and a written log of what has been provided.
  6. 6
    Map the issue to the correct penalty regime early and assess behaviour and disclosure position before responding on penalty points.

What HMRC typically asks for (Common Request Lists)

  • Self Assessment - Bank statements, employment documents (P60/P45), expense support, rental schedules, letting agent statements, tenancy agreements, CGT computations and completion statements.
  • VAT - VAT account, VAT invoices, digital records, partial exemption workings (if relevant), evidence for zero-rating or exemption, and explanations for unusual movements.
  • PAYE - Payroll reports, RTI submissions (FPS/EPS), expense and benefits records (P11D), termination payment calculations, and contracts.
  • Corporation Tax - Accounts and computation, sales completeness evidence, capital allowances schedules, director/shareholder transactions, related-party items, and a reconciliation from accounts to the tax return.

Managing the scope of information requests

HMRC often starts with broad requests. A professional response is to agree scope and sequencing, provide a clear index and explanations, and ask HMRC to confirm what it needs next. Where a request appears over-broad, the key question is whether the item is reasonably required to check the tax position. Narrowing scope early can materially reduce cost and time.

Behaviour, disclosure quality and penalty mitigation

Penalties are driven by behaviour (careless vs deliberate) and reduced by quality of disclosure.

Mitigation is maximised by:

  • making a clear disclosure when an error is found,
  • quantifying the tax impact accurately,
  • cooperating by providing access to records, and
  • evidencing systems and controls that demonstrate reasonable care, where that is the true position.

Disputes: Reviews, Appeals and Alternative Dispute Resolution (ADR)

Disputes Reviews, Appeals and Alternative Dispute Resolution (ADR)

If you disagree with HMRC’s conclusions, you may have rights to request an internal review and/or appeal to the First-tier Tribunal, depending on the decision. Alternative Dispute Resolution (ADR) can be effective where the dispute is fact-heavy or where both sides need a structured process to narrow issues.

  • Internal review - a fresh look by an HMRC officer not previously involved in the decision.
  • Appeal - a formal appeal route with statutory time limits. Professional advice is important to protect your position.
  • ADR - a structured mediation process that can be used during an enquiry and, in suitable cases, during tribunal proceedings.
  • Time period - In most cases, a request for an internal review must be made within 30 days of the date on HMRC’s decision letter (or the date HMRC offers you a review).If you miss the 30-days deadline, HMRC can still accept a late request where you have a reasonable excuse and you acted without unreasonable delay once that excuse ended.

Escalation risks: fraud procedures, serious defaulters and publication

Most checks remain civil. However, where HMRC alleges deliberate behaviour, the risk profile changes and early specialist input is critical.

COP9 and the Contractual Disclosure Facility (CDF)

Where HMRC suspects tax fraud, it may issue Code of Practice 9 (COP9) and offer the Contractual Disclosure Facility as a civil route. You normally have 60 days to accept or reject the offer.

Case 1 : IF CDF is Accepted

Accepting the CDF involves admitting deliberate behaviour and committing a complete, accurate disclosure of all irregularities in exchange for HMRC’s commitment not to pursue a criminal investigation for the deliberate behaviour disclosed.

Case 2. IF CDF is Rejected

If someone rejects COP9 / the Contractual Disclosure Facility (CDF) (or does not respond within the 60 days), then :
  • They lose the “contract” protection. The key benefit of accepting the CDF is HMRC’s commitment not to pursue a criminal investigation into the deliberate behaviour you disclose. If you reject that, protection is not in place.
  • HMRC can continue the case without the CDF and can still go criminal if they choose. COP9 states that if HMRC proceeds with a civil investigation after a rejection, it reserves the right to escalate a criminal investigation if appropriate.
  • The investigation does not necessarily stop. A rejection does not make the issue go away. HMRC may still pursue a civil route (without the CDF contract) or decide the facts to justify a criminal route.
  • Silence is treated as a rejection. If there is no response within the 60-day window, HMRC treats that as a rejection.

In brief , accepting COP9/CDF means you enter a civil disclosure agreement: you admit deliberate behaviour and commit to a complete, accurate disclosure, and HMRC agrees not to open a criminal investigation into the deliberate behaviour you disclose.

Managing Serious Defaulters (MSD)

If HMRC concludes that deliberate behaviour has occurred, it may consider the Managing Serious Defaulters programme. This can lead to enhanced monitoring and further compliance interventions.

Publishing details of deliberate defaulters

HMRC may publish details of deliberate defaulters where conditions are met. Publication is separate from the tax and penalty itself. It generally requires that deliberate penalties have been incurred and that the potential lost revenue exceeds a statutory threshold (commonly more than £25,000).

Record retention: what to keep and for how long

Record retention is central because HMRC investigations are evidence-led. Keep records longer where a compliance check is open or where the same documents support multiple taxes with different retention periods.

  • Individuals in Self Assessment (not self-employed) - Keep records for at least 22 months after the end of the tax year if the return is filed on time, or at least 15 months after filing if late.
  • Self-employed and partnerships - Keep business records for at least 5 years after the 31 January submission deadline for the relevant tax year.
  • Limited companies - Keep records for 6 years from the end of the last company financial year they relate to, and longer in certain cases (for example if the Company Tax Return was late or HMRC has started a compliance check).
  • VAT - Keep VAT records in line with VAT record-keeping requirements (typically at least 6 years, subject to specific rules).
  • PAYE - Employers must keep payroll records for 3 years from the end of the tax year they relate to.

Staying safe: steps that reduce investigation risk

The best defence in an HMRC check is a clean audit trail and consistent controls. These steps materially reduce risk and cost:

  • Keep bookkeeping up to date and reconcile bank accounts regularly.
  • Maintain a clear separation between personal and business spending. Use dedicated bank accounts where possible.
  • Keep source documents and file them consistently. Digital storage is fine, but keep it organised and backed up.
  • Document judgement calls in writing (for example apportionments, private use adjustments, capital vs revenue decisions).
  • Review returns before submission and sanity-check year-on-year movements.
  • If you discover an error, deal with it early. Unprompted disclosure can significantly reduce penalty exposure.
  • Be alert to scams. Verify any unexpected contact and do not share credentials or make payments based on pressure tactics.

How UKPA can help

An HMRC investigation is manageable with the right approach, but it can quickly become expensive and stressful if scope expands or behaviour is challenged. UKPA can support individuals and businesses through every stage of the process, including:

  • Managing communications with HMRC and acting as your appointed agent (including authorisations).
  • Building evidence packs and reconciliations that stand up to scrutiny.
  • Technical analysis of disputed points and preparation of formal representations.
  • Penalty mitigation strategy, including disclosure planning and negotiation.
  • Settlement support, Time to Pay discussions, and agreement of payment terms.
  • Dispute resolution, including ADR applications, review and appeal support, and liaison with legal advisers where appropriate.

If you have received a letter from HMRC, or you are concerned about a potential issue, contact UKPA early. Early advice helps contain scope, protect your position, and minimise penalties

Disclaimer

This article provides general information and does not constitute tax or legal advice. Tax outcomes depend on the specific facts and the law in force at the time.

Other FAQs

Can I represent myself in an HMRC investigation?

Yes, but it can be risky if the issues are technical or the information request is wide. It is easy to miss deadlines, provide inconsistent explanations, or share more than HMRC is entitled to ask for, which can increase the scope, penalties or time it takes to resolve. In many cases, having an experienced adviser involved helps keep communications focused and protects your position.

How long does an HMRC investigation take?

It depends on the complexity of the issues, how quickly information is provided, and whether HMRC accepts the explanation. Straightforward checks can conclude relatively quickly once HMRC has what it needs, but complex or disputed cases can run for many months.

What should I do when HMRC first writes to me?

Do not ignore it. Check the deadline in the letter, gather the documents requested, and consider appointing an agent immediately if the issues are technical or the request is wide.

What happens if I ignore HMRC letter ?

If you ignore an HMRC letter, the matter usually escalates. HMRC may issue a formal information notice (with penalties for non-compliance) and can raise an assessment using the information they hold which can be harder and more costly to challenge later. You can also miss strict deadlines for reviews or appeals.

Need Help?

Facing an HMRC check? Get expert guidance before it escalates.

Samikshya Basnet
Our Complete Guides
File your self assessment
Related Posts

Introducing RentalBux: Our MTD Software for Landlords

Generic software doesn't understand property businesses and require manual intervention to meet deadlines. That's why we developed RentalBux!

  • Built by Property Experts
  • Designed for UK Landlords
  • HMRC Recognised and MTD Compliant

Confused where to start?

Schedule a Free 15-minute discovery call by providing your contact details, mentioning your requirements, and selecting a convenient date for the call.

How our discovery call works:

Please wait while the page is loading
Current Progress
Current Progress

Complete Our Contact Form

Discovery Calls Scheduled

Receive a Tailored Proposal

Success message!
Warning message!
Error message!