4 HMRC scam channels now include social media, why UK finance teams should widen checks

HMRC widened its scam guidance on 6 October 2026 by naming four risk channels. In updated HMRC guidance, it says, “Identify tax scams by phone, text, email or social media.” That is the surprise: social impersonation now sits inside HMRC’s own scam checklist.

What the source says

The shift matters because HMRC is explicitly placing social media accounts inside the same scam-checking frame as calls, texts and emails. That tells accountants, payroll teams and owner-managers that tax impersonation has moved beyond the inbox. The page is practical, not dramatic. It is a checklist for judging contact, not proof that every social account is fraudulent. It is also a checklist, not a loss estimate or an enforcement bulletin.

For finance teams, the key change is channel discipline. A tax approach through a social account now belongs in the same verify-first process as an email or text. That is useful because fraud control often fails when staff treat social contact as informal.

What RecoupIQ’s data shows

The useful boundary

In our monitoring, a suspicious social media approach is an indicator, not a conclusion. It becomes useful when combined with a verified company-level check. That could be a live Companies House officer record, a known bank-detail history, or a confirmed HMRC contact route. A social profile can be spoofed quickly. Filing records and established payment instructions are harder to fake consistently.

Automate 24/7 insolvency alerts across your merchant and supplier book. recoup-iq.tech/pricing (Pro £149/mo)

Our data lens is strongest when contact risk and company-change risk appear together. If a tax, VAT or PAYE message arrives with a request to switch payment details, pause. The case for a hard stop rises. On its own, the social signal is thin. Paired with a verified mismatch, it becomes operationally useful.

What this means for UK creditors

Credit teams should treat direct messages and social account outreach as part of fraud controls. No payment diversion, tax discussion or identity handover should begin from a social message alone. Verify through a known phone number, a saved email route, or the company record before anyone acts.

For SME owners, the practical gain is speed. You do not need to prove a scam instantly. You need a rule for pausing, checking and escalating. The full article and a company-level evidence check on recoup-iq.tech help test a weak signal properly. That means checking filings, officer history and contact routes before money moves.

Monitor your debtors against signals like these continuously with RecoupIQ Pro (recoup-iq.tech/pricing).

This report is generated by the RecoupIQ News Engine based on algorithmic