Had a letter, email or text from HMRC about crypto? How to tell if it's genuine and what to do next

An envelope from HMRC about crypto can be unsettling, and so can a text claiming to be from HMRC. Both are real possibilities: HMRC does contact people who have traded crypto, and scammers use HMRC’s name too. This guide explains what HMRC’s genuine crypto messages look like, how to spot a fake, and what to do if you find you owe tax.

For how crypto is taxed in the UK, see UK crypto tax.

HMRC does contact crypto investors

HMRC’s published list of genuine contacts says that if you’ve traded in cryptoassets, HMRC may contact you by letter, email or text message.

According to HMRC, the letter or email gives you links to guidance to:

• check that you’ve declared crypto activities correctly;
• report your crypto income and gains;
• watch an HMRC video on how crypto transactions are taxed for individuals;
• check whether you need to pay tax when you sell crypto.

It also explains what a disposal is, and what to do if you receive and dispose of crypto. The text message directs you to guidance on GOV.UK.

HMRC will also receive more data. The Cryptoasset Reporting Framework applies in the UK from 1 January 2026: platforms report 2026 activity by 31 May 2027, so HMRC starts receiving that data in 2027. See CARF and crypto tax reporting.

Is it really HMRC?

HMRC’s own checklist says a contact could be a scam if it:

• rushes you;
• is threatening;
• is unexpected;
• asks for personal information, such as bank details;
• tells you to transfer money;
• offers a refund, tax rebate or grant.

HMRC also says it will never:

• leave a voicemail threatening legal action, or threaten arrest;
• use social media to offer a tax rebate or ask for personal or financial information;
• ask you to pay with gift or payment vouchers.

Some details help too. HMRC says its texts may link to GOV.UK information or HMRC webchat. QR codes in its letters usually take you to GOV.UK guidance, and will never take you to a page where you have to enter personal information. On WhatsApp, HMRC only sends one-way reminders through the UK Government channel, if you’ve subscribed.

If in doubt, don’t use links or numbers in the message. Check HMRC’s list of genuine contacts on GOV.UK, and contact HMRC through its official website.

Reporting a fake

HMRC asks you to:

• forward suspicious texts to 60599 (network charges apply), or email phishing@hmrc.gov.uk, then delete them;
• report suspicious social media accounts to branddefence@hmrc.gov.uk;
• if you’ve lost money, report it to Report Fraud, or to Police Scotland on 101 if you live in Scotland.

Fake “HMRC” contacts sometimes push people to pay in crypto. See government impersonation scams.

If the contact is genuine: check your affairs

A genuine letter is a prompt to check whether you’ve reported everything correctly. Common gaps include:

• swaps between tokens, which are disposals even though no pounds changed hands;
• spending crypto on goods or services;
• staking or lending rewards, which can be income;
• gains on crypto bought years ago.

Work through your transactions using HMRC’s pooling rules. See reporting crypto on Self Assessment.

If you owe tax: your options

For the current or previous tax year, HMRC says to declare income or gains on your Self Assessment tax return.

For earlier years, HMRC has an online cryptoasset disclosure service. How many years you need to cover depends on why the tax wasn’t paid:

HMRC says you must work out the tax, the interest and any penalties yourself, and that it will reject a disclosure without the right interest. For the full process, see how to tell HMRC about unpaid crypto tax.

Paying what you owe

After you disclose, HMRC sends a payment reference number, a 14-character reference starting with X. HMRC says:

• you must pay the full amount within 30 days of making your disclosure;
• you can pay online through your bank, by debit or corporate credit card, but not by personal credit card, or by bank transfer;
• if you can’t pay in full, contact HMRC as soon as you have your reference. It will ask how and when you can pay, and about your income, outgoings, assets and debts.

Once your payment has cleared, HMRC writes to tell you whether it has accepted your disclosure.

A quick checklist

1. Verify the contact against HMRC’s list of genuine contacts.
2. Don’t click links or call numbers in a message you’re unsure about.
3. Gather your records: exchange statements, wallet addresses, dates, amounts and costs.
4. Check every disposal and income item for the years in question.
5. Correct or disclose through Self Assessment or the disclosure service.
6. Pay on time, or contact HMRC early if you can’t.