Use this checklist to decide if a suspicious phone call, text message (SMS), email or social media account is a scam.
Check what to look for first
Use the following checklist to decide if the contact you’ve received is a scam. You can use it for phone calls, emails, text messages or social media messages.
It could be a scam if it:
- asks for personal information like bank details
- tells you to transfer money
- offers a refund, tax rebate or grant
For more help read examples of HMRC related phishing emails and bogus contact .
Check a list of genuine HMRC contacts to help you decide if the one you’ve received is genuine.
Other signs to look out for
Suspicious phone calls
- leave a voicemail threatening legal action
Read an example of an HMRC related bogus contact.
Text messages
HMRC does send text messages to some of our customers.
In the text message we might include a link to GOV.UK information or to HMRC webchat.
We advise you not to open any links or reply to a text message claiming to be from HMRC that offers you a tax refund in exchange for personal or financial details.
To help fight phishing scams, send any suspicious text messages to 60599 (network charges apply) or email: phishing@hmrc.gov.uk then delete them.
We may share your email address and phone number with other organisations to close down scams.
Social media messages
HMRC will never use social media to:
- request personal or financial information
If you cannot verify an account claiming to be HMRC, do not reply or share any information. Email details of the account name and social media platform to: branddefence@hmrc.gov.uk and ignore it.
We may share your email address with other organisations to close down scams.
WhatsApp messages
If you have subscribed to the UK Government Channel on WhatsApp, you will receive updates that might include occasional tax-related reminders. These will be single message alerts and you will not be able to reply.
HMRC will not communicate with you for any other reason using WhatsApp.
HMRC uses QR codes in our letters and correspondence. The QR code will usually take you to guidance on GOV.UK. We will tell you if the QR code takes you anywhere else.
You will never be taken to a page where you have to input personal information.
When you are logged into your HMRC account, we may use QR codes to redirect you. For example, to take you to your bank’s login page.
If we’re using QR codes in communications you’ll be able to see them on the list of genuine HMRC contacts.
To help fight phishing scams, send any suspicious emails containing QR codes to phishing@hmrc.gov.uk then delete them.
We may share your email address with other organisations to close down scams.
Gift or payment vouchers
HMRC will never ask you to pay with gift or payment vouchers.
If you’ve already shared personal details
You can report a disclosure of personal information to the HMRC security team.
If you’ve been a victim of a scam and suffered financial loss, report it to Report Fraud through their website or to Police Scotland by calling 101 if you live in Scotland.