Key takeaways
- In October 2026 HMRC warned of a rise in scam texts asking for details to complete a cryptoassets declaration.
- HMRC says it will never ask for personal or financial information by text and never sends tax rebate notifications by text.
- Forward suspicious texts to 60599 and suspicious emails to phishing@hmrc.gov.uk, then delete them.
- Report suspicious social media accounts or messages to branddefence@hmrc.gov.uk and suspicious calls through HMRC's online form.
- HMRC lists its genuine texts on GOV.UK; for example, debt recovery texts run from 15 June to 14 December 2026.
- Missed calls or voicemails from HMRC come from 0300 200 3884, which is not a number for general enquiries.
- HMRC received more than 170,000 scam referrals in the 12 months to 31 July 2025, over 47,000 of them about bogus tax refunds.
HMRC warned on social media in the week of 20 October 2026 that it had seen more scam texts claiming to be from HMRC and asking for details to complete a cryptoassets declaration. The simplest test is this: HMRC says it will never ask for personal or financial information by text. If a message asks for bank details, a password or a payment, treat it as a scam and report it.
What did HMRC warn about in October 2026?
HMRC said it had received increased reports of scam texts asking for extra information to complete a cryptoassets declaration. The warning was reported on 21 October 2026. HMRC told people to “stop and think if a request is genuine before sharing personal information” and not to click links in messages they are unsure about.
The warning lands at a busy time for genuine contact. HMRC really does write to people who have traded cryptoassets, by letter, email or text, according to its list of multi-channel contact, updated on 27 October 2026. Genuine crypto texts point you to GOV.UK guidance. They do not ask you to reply with details.
How can you tell if an HMRC text is genuine?
A genuine HMRC text will not ask for personal or financial information. HMRC’s page on genuine text messages, last updated on 5 October 2026, lists every type of text it sends.
Signs a text may be genuine:
- it matches a campaign listed on GOV.UK
- any link goes to a GOV.UK page or to HMRC webchat
- branded messages show HM Revenue and Customs as the sender, with the HMRC logo and verified sender details
Signs of a scam:
- it offers a tax refund or rebate and asks you to claim it
- it asks for card details, bank details, a password or a Government Gateway login
- it threatens arrest or court action unless you pay at once
- the link goes to a website that is not on gov.uk
Genuine HMRC texts running now
These campaigns are listed on GOV.UK as active in autumn 2026.
| Text campaign | Dates | What it asks |
|---|---|---|
| Debt recovery | 15 June to 14 December 2026 | Says a payment was not received |
| International debt | 21 September 2026 to 19 March 2027 | Check your online account |
| Retirement annuity relief | From 29 September 2026 | Review a 2024 to 2025 claim |
| VAT registration updates | From 5 October 2026 | Updates on an application |
| Self Assessment overdue | 5 to 9 October 2026 | Says your return is overdue |
HMRC’s debt texts may also say it has asked your bank to hold money in your business account. If you are unsure, do not use the number in the text. Log in to your HMRC online account or call HMRC on a number from our HMRC telephone numbers list.
How can you tell if an HMRC phone call is genuine?
HMRC says it will never ask for personal or financial information during a call. Its phone call guidance, updated on 30 June 2026, says missed calls and voicemails come from 0300 200 3884.
HMRC also says it uses automated voice messages for customers behind on payments. These may point you to HMRC’s payment pages or a helpline, but they will not ask for your details. Caller ID can be faked, so a familiar number alone does not prove a call is real. If in doubt, hang up and call HMRC back on a number you have found yourself.
How do you report an HMRC scam?
Report it to HMRC, then delete it. HMRC’s reporting page gives these routes.
| Type of contact | Where to report |
|---|---|
| Text message | Forward to 60599 (network rates apply) |
| Forward to phishing@hmrc.gov.uk | |
| Phone call | HMRC’s online form on GOV.UK |
| Social media | Email branddefence@hmrc.gov.uk |
What to do if you have already replied
- Contact your bank straight away, using the number on your card, if you gave bank or card details or made a payment.
- Change your Government Gateway or GOV.UK One Login password if you entered it on a fake site.
- Report the message to HMRC using the routes above.
- Report the fraud to Report Fraud, the national fraud reporting service that replaced Action Fraud. In Scotland, contact Police Scotland on 101.
- Check your HMRC online account for changes you did not make, such as new bank details for repayments.
What advisers should do
Scam referrals peak around the Self Assessment deadline. HMRC received more than 170,000 scam referrals in the 12 months to 31 July 2025, and over 47,000 were about bogus tax refunds, it said in a press release on 20 August 2025.
- Send clients a short reminder before the 31 January 2027 deadline that HMRC never asks for details by text.
- Tell clients who trade cryptoassets that genuine HMRC letters may arrive, and that any reply should go through GOV.UK.
- Ask clients to forward anything unusual to you before they act on it.
Frequently asked questions
Does HMRC send text messages?
Yes. HMRC sends texts for listed purposes, such as debt recovery and confirming a claim. It will never ask for personal or financial information by text.
Is a text about a cryptoassets declaration from HMRC genuine?
It may be a scam. HMRC warned in October 2026 about scam texts asking for details to complete a cryptoassets declaration; genuine crypto texts only point you to GOV.UK guidance.
What number should I forward a scam HMRC text to?
Forward it to 60599, then delete it. Your network’s standard rate applies.
Does HMRC call from 0300 200 3884?
Yes. HMRC says missed calls and voicemails come from 0300 200 3884, but the number is not for general enquiries.
Will HMRC contact me on WhatsApp or social media?
HMRC says it never uses social media to offer a tax rebate or ask for personal or financial information. Report suspicious accounts or messages to branddefence@hmrc.gov.uk.
Sources
Rates, thresholds and rules in this guide were checked against HMRC and GOV.UK guidance on 6 November 2026. Tax rules change, so check the current position on GOV.UK or with a qualified adviser before acting. This guide is general information, not personal advice.
- Report suspicious HMRC emails, text messages and phone calls (HMRC)
- Check if a text message you have received from HMRC is genuine (HMRC)
- Check if a phone call you have received from HMRC is genuine (HMRC)
- Check genuine HMRC contact that uses more than one communication method (HMRC)
- Scams warning as Self Assessment customers targeted (HMRC press release, 20 August 2025)
- Phishing and scams: examples of HMRC related contact (HMRC)