Protecting your business from HMRC scams

Scams impersonating HM Revenue & Customs (HMRC) are becoming increasingly sophisticated, with fraudsters using official-looking letters, emails, and phone calls to trick businesses into handing over sensitive information.

These scams often create a false sense of urgency, threatening fines or legal action to pressure you into sharing bank statements, VAT returns, or even ID documents.

While it can be hard to spot a fake, there are warning signs:

• HMRC emails will only ever come from a ‘hmrc.gov.uk’ address
• Requests for excessive personal or financial information are unusual
• Official HMRC letters typically direct you to log in via your online account, rarely asking for documents to be posted or emailed directly.

How to stay safe

• Never respond to suspicious emails, letters or calls without first verifying their source.
• Use only the official HMRC contact details.
• Train your team to be alert and to flag anything that seems off.
• Report phishing and suspicious messages directly to HMRC via: gov.uk/report-suspicious-emails-websites-phishing

If you are unsure whether something is legitimate, speak to us first. We are here to help protect your business from fraud.