Can you spot a fake HMRC letter?

The scam letters being sent out are quite convincing. They come with a genuine-looking HMRC letterhead, and purport to come from the ‘Indv and Small Business Compliance’ team.

Targeted companies

The scam focuses on the claim that a targeted company is required to verify their income in order to identify any business not declaring its full income. They then request:

• business bank statements for the past 13 months;
• the latest set of filed accounts, including information which – for smaller companies – would not be available from Companies House;
• VAT returns for the last four quarters; and
• for each director, a copy of their passport or driving licence.

Scammers can easily use copies of a director’s passport or driving licence to steal their identity for fraudulent purposes, possibly even accessing the company’s bank account.

The scam letter uses intimidation tactics, threatening an investigation and a potential freeze on business activity if a response is not received.

Spotting the scam

These scam letters use correct technical legislation and avoid obvious spelling and most linguistic mistakes that are usually clear giveaways. Two things to bear in mind when looking out for such frauds:

• HMRC does usually request information from companies by letter or via a business tax account, rather than by email. However, HMRC email addresses end @hmrc.gov.uk, while the email address used in these fraudulent letters is: companies-review@hmrc-taxchecks.org.
• A legitimate HMRC letter will include the company’s unique tax reference (UTR).

HMRC has published a list of their recent letters to help you confirm if a letter is genuine. The list can be found here.