HMRC Phishing Scams Explained - How to Spot and Avoid Them

HMRC Phishing Scams Explained

HMRC phishing scams are designed to trick you into handing over money or personal information by pretending to be genuine contact from HMRC. These scams are convincing because they play on very real worries about tax refunds, penalties, and deadlines, and they often arrive at the exact time you are expecting to hear from HMRC.

As tax experts and chartered accountants at ABMV in Tonbridge, we see the stress these scams cause for individuals, landlords, and business owners across Kent and beyond. In this article, we explain what HMRC phishing looks like, how to spot the warning signs, and what practical steps you can take to stay safe.


Why HMRC Scams Look so Convincing

Phishing is simply a scam where criminals contact you, usually by email, text, or phone, pretending to be a trusted organisation so they can steal information or money. HMRC is a favourite target because taxes affect almost everyone, and most of us feel some anxiety when we see an HMRC message.

For individuals and landlords, a realistic looking message about a tax refund or a penalty can be enough to prompt a quick click. For company owners, a warning about late VAT or payroll filings can feel urgent, especially at busy times. The impact of falling for a scam can be serious, including emptied bank accounts, stolen identities, and compromised tax records.

Our aim as tax experts is to give you clear, simple checks so you can pause, assess, and protect yourself.

The Most Common HMRC Scam Tactics

Scammers use every communication channel they can. The most common are:

  • Emails claiming you are due a tax refund  

  • Text or WhatsApp messages with links to “secure” payment pages  

  • Social media messages pretending to be HMRC support  

  • Phone calls or recorded messages demanding immediate payment  

  • Fake websites that copy HMRC and GOV.UK layouts

Typical hooks include phrases such as “tax refund owed”, “urgent tax penalty”, “your tax code has changed” or “your account will be closed”. Criminals copy HMRC logos, colours and wording, so a professional appearance is not proof that anything is genuine.

Spotting Red Flags in Emails and Texts

There are common warning signs that should make you slow down and check. Look out for:

  • Odd sender addresses that do not end in an official government domain  

  • Vague greetings like “Dear Customer” instead of your name  

  • Poor spelling or grammar, or clumsy wording  

  • Links that look unusual, especially if they are shortened or do not mention GOV.UK

  • Pressure to act immediately or threats if you do not respond

Never click a link just to “see what it is”. Instead, hover your cursor over it to preview the address, or on a phone, press and hold to view the link, then cancel. HMRC will not ask for full bank details, passwords or card PINs by email or text.

If you are unsure, go directly to GOV.UK by typing the address into your browser, or speak to your accountant or trusted tax experts before doing anything. Use contact details you already know, not those in the suspicious message.

Phone Calls, Letters and Fake Websites

Scam phone calls often use threats to panic you. You might hear claims of “immediate court action”, “an arrest warrant” or demands for payment by bank transfer or even gift cards. Some calls use automated voices to make them sound official.

Fake letters can look very similar to real HMRC correspondence, including reference numbers and barcodes. Fake websites might appear in search results or be linked from messages, then prompt you to enter Government Gateway logins, card numbers or passport details.

Simple checks can help:

  • Compare any phone number with those listed on official HMRC contact pages  

  • Check letter references against previous genuine letters you hold  

  • Type web addresses manually into your browser instead of following links  

  • Make sure you only log in through official GOV.UK pages

What to Do If You Suspect or Fall for a Scam

If something feels wrong, stop. Do not reply, do not click, and do not pay. You can forward suspicious emails to HMRC’s phishing address and send suspicious texts to the number HMRC publishes for scam reports, then delete them from your devices.

If you have clicked a link, entered details or sent money, act quickly. Contact your bank immediately, explain what has happened and follow their guidance. Change passwords on email, text, banking, and Government Gateway accounts, and enable two-factor authentication where possible. Keep an eye on your accounts and tax records for anything unusual.

ABMV are professional tax experts and chartered accountants can help you review any HMRC correspondence, speak to HMRC where needed, and help you put your records back in order if information has been compromised. At ABMV, we regularly assist clients in Tonbridge and across Kent with checking that HMRC contact is genuine and that their tax affairs remain secure.

Gain Clarity And Confidence In Your Next Tax Decision

If you are ready to turn complex rules into clear actions, our tax experts are here to guide you step by step. At ABMV, we take the time to understand your goals so your tax position supports the bigger picture of your finances. Speak to us today to explore your options, avoid costly mistakes, and put robust plans in place. You can also contact us to arrange a confidential discussion.

Next
Next

MTD for Landlords Explained - Upcoming Changes and How to Prepare