HMRC issues warning on Self Assessment scams

HM Revenue and Customs (HMRC) has issued a warning to business owners who file Self Assessment tax returns, as scam attempts become increasingly sophisticated.

Scammers send falsified letters, emails, and voicemails from the department that threaten legal action over pretend tax errors or underpayments. Concerned customers reported more than 170,000 scam referrals to HMRC in the 12 months to 31 July 2025. 

Earlier this year, 100,000 PAYE employees were contacted after their accounts were used in a phishing scam that cost HMRC £47m.

Kelly Paterson, HMRC’s Chief Security Officer, said: “Scammers target individuals when they know Self Assessment customers will be preparing to file their tax returns. We’re urging everyone to stay alert to scam emails and texts offering fake tax refunds.”

Rise of fake tax refund scams

Scammers often impersonate government bodies such as HMRC, Companies House or even the Intellectual Property Office (IPO), in order to steal your money, or your identity, by getting you to reveal personal information. These kinds of scams are called ‘phishing’. 

Thanks to the information you file in your tax return, phishers who contact business owners may be able to gain access to confidential information like passwords, usernames, and access codes, so it’s important to stay vigilant.

HMRC data reveals that over a third of phishing attempts reported by customers last year regarded bogus tax rebates. Criminals can contact you via email or text message in order to get you to click on a hyperlink and enter personal details.

Image credit: gov.uk

New year, new scams

HMRC says filing early can help. Those who have already submitted their tax return are more likely to recognise scam attempts near the Self Assessment 31 January 2026 deadline. 

Taxpayers who leave filing until the last minute often face added pressure and may be more vulnerable to phishing messages that appear urgent or official. By contrast, early filers tend to have more time to scrutinise communications and are less likely to be caught off guard. 

Thankfully, reports of scam attempts have fallen by 12% year-on-year, according to government data. But evolving technology means that phishing attempts are harder to spot.

Cyber criminals are reportedly using AI chatbots to fix grammatical errors and spelling mistakes, removing an obvious red flag for those on the lookout for false communications.

Scammers are also increasingly setting up fake websites that copy the design and branding of HMRC in order to dupe taxpayers. In 2023, nearly 27,000 of these malicious web pages were taken down, representing a 29% increase on the previous year.

How to spot an HMRC scam

The best way to prevent yourself from falling prey to a scam is not to panic. ““Taking a moment to pause and check can make all the difference”, says Paterson. If you receive urgent communication or threats about a tax filing, take a deep breath. HMRC will not:

• Leave voicemails threatening legal action or arrest
• Ask for personal or financial information via text message or email
• Contact customers by email, text, or phone to inform them about a refund 

Never click on suspicious links or share personal information directly from a suspicious source. Instead, contact the company or person using their official details. For example, if you’ve been sent suspicious communication from someone claiming to be from HMRC, you can check the official HMRC scams guidance to check if it’s a genuine contact.

If you do fall victim to a scam, contact your bank immediately to stop any unauthorised transactions. Stop all communication and report the scam to phishing@hmrc.gov..

“Report any suspicious activity to us before the fraudsters do any more harm. Search ‘HMRC scams advice’ and refer to the scams guidance on GOV.UK”, adds Paterson.