Spotting Tax Based Scams

Tax scams continue to grow in scale and sophistication, especially as more people interact with HMRC through digital channels. As part of Tax Awareness Week, we conducted a poll on TikTok to test public awareness of common scam tactics. The question asked whether HMRC would ever contact taxpayers by text message to request bank details for a tax repayment. Encouragingly, 96% of respondents correctly recognised this as a scam. Although this result is reassuring, it still highlights that some people may be unsure about what HMRC will and will not do, and scammers often exploit these uncertainties.

Fraudsters regularly impersonate HMRC because taxpayers trust the organisation and are used to receiving legitimate updates from it. Scammers aim to trick individuals into revealing personal information, such as National Insurance numbers or bank details, or into making payments to fraudulent accounts. These communications may appear convincing, using HMRC branding, realistic language, or spoofed phone numbers to create a sense of urgency.

How to check whether a message is genuine

HMRC has a dedicated webpage offering up‑to‑date information on phishing and scams, and they encourage taxpayers to report anything suspicious.

HMRC states clearly that they will never send notifications of tax rebates by text or social media.

They may request information by email, but only from email addresses ending @hmrc.gov.uk. If communication seems unusual, unexpected or urgent, contact HMRC directly using alternative official channels (phone, webchat or post) to verify it. Never click on links in suspicious emails instead report them and delete them immediately after reporting.

What about QR codes?

HMRC does use QR codes in letters and official correspondence, but these will only ever direct taxpayers to guidance. They will not take them to pages asking for personal information unless they have already logged into their HMRC account. Once logged in, HMRC may use QR codes to direct taxpayers to pages requiring further information.

Scam phone calls

Fraudulent phone calls remain one of the most common forms of HMRC-related scams. 

Even calls to a landline can be spoofed to appear as though they are coming from an official HMRC number. Scammers may claim that unpaid tax is owed or that court proceedings are imminent. 

These tactics are designed to scare individuals into making immediate payments.

HMRC provides examples of genuine calls on their website:

Important: HMRC will never:

• threaten arrest,
• demand immediate payment over the phone,
• insist on payment via gift cards, cryptocurrency or money transfer.

If you think you’ve been targeted

If someone believes they have been approached by a scammer or has already shared information, they should report it as soon as possible.

England or Wales: Contact Report Fraud on 0300 123 2040 or report online.

Scotland: Contact Police Scotland 

Reporting helps authorities track and shut down fraudulent activity and prevents others from falling victim.

Top signs a message may be a scam

• Unexpected contact about a tax refund or payment
• Pressure to act quickly
• Threats of legal action
• Incorrect spelling or unusual phrasing
• Requests for bank details or login information
• Email addresses or phone numbers that don’t match official HMRC formats

Additional guidance

The ATT provides a range of helpful cyber security articles for members and the general public. 

These resources explain how to strengthen security practices and stay informed about new threats in the digital landscape.

To explore all the resources, daily content, and ways to get involved during Tax Awareness Week 2026, visit the Tax Awareness Week webpage - and watch out for new content being added every day throughout the week!