Making sure your money and details are safe is so important.

We know it can be scary knowing that the scams from fraudsters look more and more genuine each time. So, to make things easier and take some of the worry away, we’ve broken down how to check if your correspondence from HMRC is genuine.

A guide to HMRC communications | Whyfield Accountants in Truro, Cornwall

Let’s start with calls…

(To skip to emails or letters, click below)

How to check if an email from HMRC is genuine

How to check if a letter from HMRC is genuine

 

How to check if a call from HMRC is genuine

 

⭐ Check HMRC’s official list of recent phone contacts on GOV.UK.

This list shows the types of calls they’re currently making, so you can quickly see if yours matches up. If it’s not listed, it’s best to double-check using HMRC’s contact details or guidance on communications that use more than one method.

Genuine HMRC calls happening right now

Here are some examples of legitimate HMRC phone activity happening this autumn (2025)

➡️ Debt management calls: some customers may receive recorded voice messages reminding them about overdue payments. These messages might include payment information or a helpline number, but they’ll never ask for personal or financial details.

➡️ Inheritance Tax feedback: between 6th October and 14th November 2025, HMRC may call to invite you to share your experience dealing with Inheritance Tax nil rate bands (including transferable and residence nil rate bands). Participation is completely voluntary, anonymous, and used only for research purposes.

➡️ Research into temporary work abroad: from 22nd September to 28th November, HMRC has partnered with IFF Research to speak with businesses arranging temporary work overseas. Again, any information you share is confidential, secure, and used purely for research.

When in doubt, check and report!

Remember, never share your personal details.

All information about checking if a call is genuine can be found below.

 

How to check if an email from HMRC is genuine

Again, with emails it’s easy to see why people second-guess those claiming to be from HMRC. We’ve highlighted previous emails just like this in previous posts.

Here are a few simple checks you can make to stay safe.

⭐ Start with the official HMRC list

HMRC regularly updates a list of genuine emails they’re sending out. If you’ve received something that doesn’t appear on that list, it’s worth double-checking on GOV.UK or looking at the section on contacts that use more than one communication method.

Examples of real HMRC emails

➡️ Annual Tax Summary: an alert to say your summary is ready to view online. It’ll explain what’s included, but it will never ask for personal or banking details.

➡️ Child Benefit claim updates: confirming that your claim has been received and is being processed. These emails will come from an HMRC address and won’t request any private information.

➡️ Cryptoassets educational email: sent to those who’ve traded cryptoassets, linking to official guidance and a YouTube video.

➡️ Employer or business guidance: for example, updates about VAT, Making Tax Digital, or National Minimum Wage support. These always link back to GOV.UK, and they never ask for sensitive information.

➡️ Help to Save: encouraging eligible customers to open or use their account. Again, these emails only signpost you to official GOV.UK pages and won’t ask for personal details.

There are many other legitimate emails HMRC may send throughout the year, especially for businesses and agents. For the full, up-to-date list, visit the GOV.UK website.

 

How to check if a letter from HMRC is genuine

Much like emails, the first recommendation is to check!

⭐ Check the official list

➡️ HMRC regularly publishes a list of genuine letters they’re currently sending out. But, if the letter you’ve received isn’t listed there, don’t panic. You can also check:

➡️ HMRC’s guidance on contacts that use more than one communication method

Whether any QR codes printed on the letter are genuine (HMRC explains how to do this on the GOV.UK website).

Examples of genuine HMRC letters

Here are a few examples of legitimate letters HMRC is sending at the moment:

➡️ High Income Child Benefit Charge: explaining if you need to make a payment for the 2024/25 or 2025/26 tax year, and how to do so.

➡️ Home as office expenses: asking some businesses to review claims and make corrections if needed.

➡️ National Insurance contributions (Letter CA4361): sent when HMRC believes you may have overpaid and could be due a refund.

➡️ Overdue payments (Letters IDMS99 or IDMS99P): informing you of outstanding tax or penalty amounts, with clear guidance on how to pay. These letters may include a QR code that links directly to the official GOV.UK payment page.

➡️ Home Responsibilities Protection eligibility (Letter CA2490): helping you check if you’re missing any credits that count toward your State Pension.

There are many other genuine letters in circulation, so if yours isn’t mentioned here, it doesn’t necessarily mean it’s fake. For the most up-to-date and complete list, visit the GOV.UK website.

 

How to stay safe

HMRC letters may include instructions or QR codes, but they will never:

Ask for your personal or financial details over email or text

Direct you to make payments to non-HMRC bank accounts

Ask you to respond to any address that doesn’t end in @hmrc.gov.uk

 

If you’re unsure about whether a letter, email, or call is genuine, it’s always worth verifying before you act.

You can:

  • Check if it’s genuine via GOV.UK for official information (links above).
  • Contact the relevant HMRC helpline for reassurance
  • Report suspicious calls, emails or texts directly to HMRC

And, if needed:

  • If you have clicked on any links, or opened any attachments, we recommend you run your antivirus software as a matter of urgency and update any relevant passwords.
  • If you have disclosed any personal details to this scam, please forward a report to us at security.custcon@hmrc.gov.uk.
  • If you have disclosed any bank or card details, please contact your bank or card issuer immediately.
  • Contact your bank and Action Fraud (or Police Scotland via 101) if you think money has been taken

It’s always better to take a moment to verify before responding. Genuine HMRC staff will completely understand your caution.

 

Stay safe.

Get the latest industry updates, tax tips and Whyfield news straight to your inbox.

Subscribe to our monthly newsletter.

  • This field is for validation purposes and should be left unchanged.
You can unsubscribe at any time.