HMRC scam calls: how to spot a fake tax call and report it
Quick answer
A call, voicemail, text or email that claims to be HMRC and demands personal details or threatens legal action is a scam. Hang up and contact HMRC yourself using the number on gov.uk, not the one the caller gives you. Report it through GOV.UK.
- Comes by
- Phone call, Text, Email, Voicemail
- Pretends to be
- HMRC
- Last updated
How it works
Scammers pretend to be HMRC (HM Revenue and Customs, the UK tax authority). The contact might be a phone call, an automated voicemail, a text or an email, and it usually claims you owe tax, are due a refund or face legal action.
They are after personal details, bank or card details, or an immediate payment. The pressure to act fast is the point: it stops you checking.
HMRC is the organization being impersonated here, not the scammer. Its own guidance on GOV.UK says that if you get a call asking for personal information or threatening a lawsuit, you should report it online.
Red flags
- An unexpected call, voicemail, text or email saying you owe tax or are owed a refund
- Threats of arrest, legal action or a lawsuit
- Pressure to pay or give details immediately
- A request for bank details, card numbers or personal information
- A link in a text or email that isn't on a gov.uk address
- A caller who won't let you hang up and call back
Example message
This is HMRC. You have unpaid tax and legal action will begin against you today. Press 1 or call [phone number] to speak to an officer. Or visit [link] to resolve this.
What to do
- 1
Hang up or don't reply
Don't press keys, call back the number given or click the link.
- 2
Check it with HMRC yourself
Look up HMRC's contact details on GOV.UK and call that number to ask whether the contact was genuine.
- 3
Report it on GOV.UK
GOV.UK says phone calls asking for personal information or threatening legal action should be reported online. Forward suspicious texts to 60599 and emails to phishing@hmrc.gov.uk.
- 4
If you gave bank or card details, call your bank
Use the number on your card or the bank's website. Ask them to stop payments and secure the account.
- 5
If you shared personal details, tell HMRC and protect your identity
Email the details of what you disclosed (without adding more personal data) to phishing@hmrc.gov.uk. Change affected passwords and turn on two-step verification.
Report it
Check if your details are exposed with Serus
Scammers find your number and address on data brokers and people-search sites. Serus removes them.
Why you got it
Scammers who know your name, number or address sound more convincing. Those details are easy to find on people-search sites and in breach data. Serus finds where your details are listed and removes them, and alerts you when they show up in a breach, so fewer scammers can build a believable story about you.
Frequently asked
Will HMRC phone me about unpaid tax?
Treat any unexpected call that demands payment or personal details as suspect. Hang up and contact HMRC through the number on GOV.UK to check.
Is HMRC behind these calls?
No. HMRC is the organization scammers impersonate. HMRC publishes guidance on how to report them.
Where do I forward a scam text?
GOV.UK lists 60599 for texts, charged at your network rate. Emails go to phishing@hmrc.gov.uk.
I gave my details. What now?
Contact your bank if you shared card or account details, and email HMRC's phishing address saying what you disclosed.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
