18 September HMRC text guidance gives SMEs an immediate anti-scam check

HMRC published a practical warning on 18 September. In its new guidance, it says, “Check if a text message you’ve received from HMRC is genuine” and “Check a list of recent text messages from HMRC to help you decide if a text you’ve received is a scam.” For SME owners, bookkeepers and accountants, the message is simple: verify first, then click, reply or pay.

What the source says

This is a same-day control, not a long policy paper. HMRC has published a current list of genuine texts so taxpayers and advisers can compare any message against an official record. That matters because HMRC branding is often used to create urgency around payments, refunds and account checks.

The useful point is timing. The guidance landed today, which means finance teams can use it this week without changing systems or waiting for training. It does not ask businesses to infer motive. It asks them to compare wording against HMRC’s own recent messages, which is a narrower and safer test.

For accountants, it also creates a standard client instruction. If an HMRC text arrives, pause and check the list before anyone acts. That is how routine verification breaks the fraudster’s main weapon, speed.

What RecoupIQ’s data shows

Our signals do not tell you whether an HMRC-branded text is genuine. That boundary matters, because a scam message and a real tax issue can create the same urgency. A text on its own is an indicator, not a conclusion.

Uncover unadvertised petitions, director flight and balance sheet stress. recoup-iq.tech/forensic-report (£167)

Where the signal becomes useful

Once the text is checked against HMRC’s list, our capital-bleed signal and director-change alerts help test whether the request fits the company. Used with the Companies House record and a call-back to a known number, they cut avoidable payment risk. If the message demands speed but the company file shows no matching stress, that mismatch deserves attention.

A clean signal set does not validate a text. Equally, a stressed file does not prove the sender is HMRC. The value comes from combining a verified public source with a company-level check.

What this means for UK creditors

Treat every HMRC-branded text as a verification event, not an instruction. If a debtor, director or external accountant forwards one, hold action until the wording matches HMRC’s list and your normal contact check is complete. That is especially important where bank details, repayment claims or account reactivation are involved.

The fastest mistake in credit control is to let a believable tax message override a known process. The signal does not say fraud, and it does not say distress. It becomes useful when the message, the company record and your internal callback all point the same way.

Get the data lens on any UK Ltd, £29 Quick Check or £167 Forensic Report at recoup-iq.tech/quick-check.

This report is generated by the RecoupIQ News Engine based on algorithmic