Verifying the authenticity of HMRC email communications

HMRC has published guidance detailing the types of email communications it currently sends to taxpayers and professional agents. This list is designed to help practices distinguish between legitimate HMRC correspondence and potential phishing attempts, particularly regarding Anti-money laundering supervision and Mandatory Tax Adviser Registration (MMTAR).

What it means for a practice

• Staff should cross-reference incoming HMRC emails against this official list to confirm legitimacy, especially regarding agent services account registration instructions.
• Be aware that while HMRC sends emails regarding mandatory registration or AML supervision, these will not ask for sensitive personal or financial information.
• If an email received does not appear on the published list, practices should report the suspicious communication to HMRC immediately and check other authorised communication methods.