A growing number of people are being targeted by fake letters that claim to be from HMRC. These scams are becoming more sophisticated, often mimicking the language and appearance of official documents to trick recipients into handing over sensitive information.
How the Scam Works
The fake HMRC letter scam involves criminals sending highly convincing letters that appear to be from an official HMRC department. These letters often reference legitimate-sounding initiatives, such as compliance checks or income verification programmes, which can make them seem authentic at first glance.
Typically, the letter asks the recipient to supply a range of sensitive information, including recent bank statements, VAT returns, and even ID documents like passports or driving licences. These details are then requested via email, often to an address that looks formal but is not linked to HMRC in any way.
GOV.UK has a guide on how to check whether a letter is genuine.
Red Flags to Watch For
Despite the professional appearance of these letters, there are several signs that something isn’t right. One of the clearest indicators is the email domain used – HMRC will always use “@hmrc.gov.uk” addresses, never alternatives like “.org” or “.com”.
Another red flag is any urgent demand for confidential documents, especially if it seems unexpected. Scammers often apply pressure to respond quickly, hoping people will act without checking. Always be cautious of unsolicited contact asking for personal information.
How to Protect Yourself
If you receive a letter that raises suspicion, take time to verify it before doing anything else. Use only the official contact details from HMRC’s website to check whether the request is legitimate. Do not reply to the letter or send information to the email address provided.
Businesses may also benefit from advice or training delivered by professionals, such as Stroud accountants like randall-payne.co.uk/services/accountancy/stroud-accountants, who are familiar with HMRC processes and common scam tactics. Resources like how phishing scams are changing can also help keep your team informed and alert to potential threats.
Remaining alert to the signs of fraud can help protect both your personal data and your business.
