Major Surge in HMRC Tax Scams

HMRC has warned of a significant increase in tax-related fraud over the past 12 months, with more than 170,000 scam reports received between August 2024 and July 2025. Fraudsters are using increasingly sophisticated tactics to impersonate HMRC and trick taxpayers into handing over money or sensitive data.

This spike in scams coincides with key tax deadlines (Self-Assessment, VAT, PAYE) and wider digitalisation, which fraudsters exploit to impersonate legitimate HMRC communication.

Common Types of HMRC Scams

1. Tax Refunds Scams

• Victims receive emails or texts claiming they’re owed a tax rebate.
• Links direct them to fake HMRC-branded websites where bank details are harvested.
• Often timed around Self-Assessment season or year-end VAT refunds.

2.  “HMRC Legal Action” Calls

• Automated calls claim urgent tax debts or errors.
• Victims are pressured to make payments by bank transfer or cryptocurrency.
• Threats of arrest, legal proceedings, or immediate penalties.

3.  Stamp Duty Refund Scams

• Fraudulent advisers offer to “recover” SDLT overpayments, usually by submitting false claims to HMRC.
• The taxpayer is left liable for incorrect claims, interest, and penalties.

4.  Email Phishing Attacks

• Emails that appear to be from HMRC requesting password resets, logins, or 2FA codes.
• Can target individuals and business owners, especially those registered for online services.

5.  Fake “GOV.UK” Payment Pages

• Victims are redirected to websites that mimic official GOV.UK pages.
• These collect card details and personal information under the guise of settling tax bills.

Key Protection Steps for Taxpayers & Businesses

Verify Communications

• Emails: HMRC will never email you to offer a tax refund.
• Texts: HMRC may send texts, but never with clickable refund links.
• Calls: Genuine HMRC staff do not make threats or demand immediate payment.

Report Suspicious Contact

• Report phone scams via HMRC’s online fraud form: www.gov.uk
• Forward suspicious emails to: phishing@hmrc.gov.uk
• Forward scam texts to: 60599

Online Accounts Securely

• Always log in directly via: www.gov.uk
• Do not store passwords in browsers—use a reputable password manager.
• Enable 2-factor authentication (2FA) on HMRC and business tax accounts.

Business Advice: What Employers Should Do

• Staff Training: Educate employees, especially finance teams, about current scam formats.
• Use MTD-compatible software only from providers listed on HMRC’s approved software page.
• Secure Systems: Ensure payroll, VAT, and tax software are up to date and used only with secure logins.

HMRC Enforcement & Support

HMRC has dedicated a counter-fraud unit to deal with tax scams and data theft. Victims of scams may still be liable if false returns or refunds were submitted in their name. HMRC urges people to act fast, the sooner a fraud is reported, the higher the chance of limiting damage.

Coming Up: Higher Scam Risk Periods

• October–January: Self-Assessment scammers target individuals submitting tax returns.
• Quarterly VAT Deadlines: Fake VAT refund emails are common in the lead-up to submission dates.
• April 2026: Start of MTD for Income Tax may trigger a fresh wave of scams targeting landlords and self- employed individuals.

Final Reminder

HMRC will never:

• Ask for personal or payment details by email or text.
• Demand urgent payments or threaten arrest.
• Offer refunds via third-party links.

Stay alert. Stay safe. Share this bulletin with anyone handling tax matters in your organisation or family.

How CloudAcc Can Help

If you need assistance, our team is here to help. You can get in touch with us to schedule a review or consultation.