HMRC VAT Email Scam Warning: Fraudsters Targeting Businesses
A new HMRC VAT scam email is circulating, targeting VAT-registered businesses with convincing but fraudulent request to confirm VAT submissions. The email looks official, using HMRC’s branding and formal language, but it’s designed to steal sensitive business details.

How the HMRC VAT Scam Works
One of our customers recently received this scam email. At first glance, it appeared legitimate, with HMRC’s black-and-white styling and a professional subject line:
Dear[Business Name],
We are reaching out to you today.
All VAT submissions are periodically reviewed for consistency and accuracy.
To proceed, please confirm the accuracy of your VAT submission.
If you have any questions, visit the HMRC Contact Page.
Review Your VAT Submission
Best Regards,
GOV.UK Business Tax Compliance Team
Sounds official, right?
However, when they clicked the link, they were asked to provide their business details—something HMRC would never request in this way. That’s when they spotted the fake sender address:
Here are two examples of the email addresses we’ve seen used in this scam:
📧 c_______@altoloans.com
📧 c_______@dailygut.com
To protect our customer’s privacy, we have redacted their business name from the email above. We’ve also removed part of the scammer’s email address to avoid directing anyone to potential malicious sites. it’s unclear whether these are real hacked accounts or simply fake addresses set up for the scam. Either way, they are not legitimate HMRC email
How to Spot and Avoid the HMRC VAT Scam
If you receive an email asking you to confirm VAT details:
✅ Do NOT click any links – even if it looks official.
✅ Check the sender’s email address – if it’s not from @gov.uk,it’s a scam.
✅ Report it immediately – forward the email to phishing@hmrc.gov.uk.
✅ Directly check your Government Gateway (HMRC Online Services) login – Logging into your online HMRC account directly and reviewing messages on there will help you determine what needs to be done on your account.
Why Scammers Target VAT-Registered Businesses
VAT fraud is a growing issue, and cybercriminals know that business owners fear HMRC investigations and penalties. These scam emails are designed to create urgency, pressuring recipients into clicking a malicious link before they’ve had a chance to question its legitimacy.
Final Thoughts: Stay Vigilant
Scammers are becoming more sophisticated, but simple checks can keep your business safe. If you’re ever unsure about an email, contact HMRC directly or speak to your accountant.
Want to stay updated on scams like this? Sign up for our newsletter, and we’ll keep you informed.
Read How To Avoid Having Strangers Knocking At Your Home Door If You Have A Limited Company.