Will HMRC Call Me From a Mobile Number?

Yes, HMRC can genuinely call a taxpayer, business owner or tax agent on a mobile phone.

However, that does not mean an unexpected call displaying an ordinary UK mobile number is genuine. The number shown on the screen should never be treated as proof of the caller’s identity.

Current guidance confirms that some official calls or voicemails may come from 0300 200 3884. HMRC also conducts telephone campaigns concerning debt management, missing returns, pension schemes, compliance matters and voluntary research.

The safest response to any unexpected call is to disclose nothing, end the conversation and verify the contact independently.

Key Takeaways:

• HMRC makes genuine telephone calls to individuals and businesses.
• Being called on a mobile differs from receiving a call from an 07 number.
• Caller ID can never confirm a caller’s identity by itself.
• Threats, unusual payment demands and pressure are strong scam indicators.
• Suspicious callers should be checked through independently obtained contact details.

Verification should focus on the reason for the call and the caller’s behaviour, not merely the displayed number.

What Does HMRC’s Official Guidance Say About Genuine Calls?

HMRC currently sends automated debt-management voice prompts to some customers who have fallen behind with payments.

These calls can be received on landlines or mobile phones and may provide payment information or a helpline number, but the messages should not request personal or financial information.

Pension scheme administrators who have not migrated their schemes to the Managing Pension Schemes online service may also receive follow-up calls between 29 June and 31 December 2026. The published guidance states that these calls will not request personal financial information.

For calls made from 0300 200 3884, the official statement says HMRC will “never ask for personal or financial information during the call”.

That assurance applies to the contact described on that page and should not be expanded into a universal claim that no genuine department ever conducts security checks.

How Can Someone Check Whether an HMRC Call Is Genuine?

A genuine caller should be capable of explaining the department involved, the general nature of the contact and how the recipient can verify it independently.

The recipient does not need to remain on the line while conducting those checks.

Caller ID And Number Spoofing

Caller ID is the telephone number or name displayed when a call arrives. Criminals may manipulate this information so that a call appears to come from a familiar organisation, a local area code or an official-looking 0300 number.

The safest process is to compare the claimed purpose against the official phone-call contact list, then contact the relevant department through independently sourced details. The published list includes active debt-management calls, pension scheme calls and the 0300 voicemail number.

What Details Should Be Checked Before Continuing?

The recipient can ask for basic information without confirming sensitive details:

• The department or team making contact.
• The general tax matter involved.
• An existing case or correspondence reference.
• The type of tax, return or account concerned.
• An independently verifiable callback route.

Knowing a person’s name, address or business details does not prove legitimacy because some information may be available through public records, social media or data breaches.

Call Verification Table:

No individual check is conclusive, but several warning signs together should end the conversation.

When Might HMRC Genuinely Contact Someone by Telephone?

A genuine call is more plausible when it relates to an existing tax issue, recent correspondence or a callback that the taxpayer requested.

Current contact programmes include calls about missing Corporation Tax returns, VAT returns, payroll information, economic crime supervision, data-holder notices and VAT visits.

Some programmes use a letter, email or text before a follow-up call because this can add security and prepare the recipient for contact.

Examples include Corporation Tax missing-return calls between 1 June and 31 July 2026, and VAT missing-return contact between 13 April and 30 September 2026.

Some payroll enquiries may involve standard security questions and requests for a breakdown of pay and deductions.

Prior correspondence makes verification easier, but it does not make every later caller genuine.

The recipient should use the contact information in the original correspondence only after confirming that the letter or message itself is authentic.

What Warning Signs Suggest an HMRC Scam Call?

The clearest warning signs concern the caller’s behaviour rather than whether the number is mobile, landline, withheld or apparently official.

A scammer may threaten arrest, claim a lawsuit has been filed, allege National Insurance fraud or offer an unexpected tax refund.

Published examples identify an automated call instructing the recipient to press 1 and make a payment. The official warning is direct: “This is a scam and you should end the call immediately.”

Other warning signs include demands for an immediate bank transfer, card payment, gift voucher, or cryptocurrency. HMRC specifically says it will never ask for payment through gift or payment vouchers.

Unexpected requests for bank details, passwords, Government Gateway credentials or one-time authentication codes are also high risk.

A genuine process may sometimes involve limited identity checks, but an unverified caller should never be given unrestricted access to a tax account, bank account or device.

What Should Someone Do During and After a Suspicious Call?

The correct response depends on whether the person simply received the call, disclosed information or transferred money.

During The Call

The recipient should avoid debating with the caller or attempting to expose the scam. A safer approach is to record basic details and end the conversation.

• Do not confirm a National Insurance number or date of birth.
• Do not provide banking or card information.
• Do not share passwords or security codes.
• Do not press buttons in response to automated threats.
• Do not download remote-access software.
• Do not follow payment instructions while still on the call.

The official suspicious-contact warning examples identify lawsuit threats, National Insurance fraud claims and refund offers requesting banking information.

Ending the call creates space to verify the matter without pressure.

What If Personal Or Banking Details Were Shared?

Anyone who disclosed a password should change it immediately, including on other accounts where the same password was used.

A compromised Government Gateway account should be checked for altered contact details, unauthorised submissions or unfamiliar activity.

If banking or card information was disclosed, the bank’s fraud team should be contacted immediately. Where money has been transferred, the customer should ask whether the payment can be stopped or recalled.

People who have lost money or been hacked can report the incident through Report Fraud in England, Wales and Northern Ireland, online or by calling 0300 123 2040. In Scotland, the reporting route is Police Scotland on 101.

Reporting And Account Protection

A suspicious tax-related phone call can be submitted through the official suspicious-call reporting service. The user must provide an email address or sign in to complete the online report.

Useful report details include:

• The date and approximate time.
• The number shown on the screen.
• Whether the call was automated.
• The caller’s stated department.
• The content of any threat or offer.
• The information or payment requested.

Suspicious text messages can be forwarded to 60599, with normal network charges applying. Suspicious emails can be forwarded to phishing@hmrc.gov.uk and then deleted.

Reporting repeated attempts can help investigators connect related campaigns and disrupt further scams.

Can HMRC Ask for Personal, Financial or Security Information?

Blanket statements that HMRC never asks questions by phone are inaccurate. Some genuine calls may include standard identity checks or case-specific questions, particularly where an employer, business or authorised agent is discussing an active enquiry.

The critical issue is whether the contact has been verified and whether the request matches the published purpose.

For example, an active payroll enquiry may involve standard security questions, while certain VAT-related contact may request basic information about where a business trades.

Information Request Table:

A request that might be legitimate in a documented process can still be dangerous when made by an unexpected, unverified caller.

How Should Businesses and Tax Agents Verify an HMRC Call?

Companies, employers and tax agents may receive genuine telephone contact about Corporation Tax, PAYE, VAT, payroll records, compliance checks, missing returns or an authorised client’s debt.

Verifying An Active HMRC Case

A business should compare the contact against its records before discussing the matter:

• Check recent letters and secure account messages.
• Review outstanding returns and payment deadlines.
• Confirm whether an accountant requested a callback.
• Use the known caseworker’s independently verified details.
• Limit tax information to authorised employees.
• Record the call in the company’s fraud or compliance log.

Current programmes include VAT missing-return reminders, Corporation Tax missing-return calls and payroll enquiries.

Businesses may also receive calls concerning VAT visits, where the caller may seek to arrange an inspection and confirm which records will be required.

A caller’s knowledge of a director’s name, company number or registered address is not sufficient authentication.

What If An Outside Research Organisation Makes Contact?

Independent research organisations may contact taxpayers, businesses or agents on HMRC’s behalf. Current examples include Verian, IFF Research, NatCen, Ipsos and People for Research.

The recipient should confirm:

• The organisation’s exact name.
• The subject and dates of the research.
• Whether a letter or email was sent first.
• Whether participation is voluntary.
• What information the researchers may request.

For example, IFF Research may contact agents and small or mid-sized businesses between 20 July 2026 and 16 April 2027. Participation is voluntary, and the published description says personal financial information will not be requested.

A voluntary research call should not be confused with tax enforcement, debt collection or a compulsory compliance enquiry.

What Common Myths About HMRC Mobile Calls Should Be Avoided?

The first myth is that HMRC never calls taxpayers. Official contact lists show numerous genuine telephone campaigns, including debt-management prompts, pension scheme reminders, missing-return contact and business research.

The second myth is that every 07-number call is definitely fraudulent.

A mobile number is a reason for caution, but the official evidence does not support a universal percentage such as “99% of genuine calls use landlines”.

The call should be assessed and verified rather than accepted or rejected solely by its number.

The third myth is that an official-looking 0300 number proves legitimacy. Caller information can be manipulated, so recipients should still verify the reason for contact.

It is also inaccurate to claim that HMRC always writes before calling or never asks security questions. Some campaigns use letters first, while others may involve calls, emails, texts or standard identity checks in different sequences.

Finally, current guidance refers to Report Fraud, not Action Fraud, for financial losses outside Scotland. The name was formally updated in December 2025.

Conclusion

HMRC can genuinely call someone on a mobile phone, but the appearance of a mobile number does not establish who is calling.

A recipient should consider whether the call relates to an existing tax matter, whether the caller’s requests match published guidance and whether independent verification is allowed.

Threats of arrest, immediate payment demands, refund offers requesting financial details and attempts to obtain passwords or security codes are serious warning signs.

The safest procedure is straightforward: end the unexpected call, find the appropriate contact details independently and verify the matter before disclosing information or making a payment.

Frequently Asked Questions

Can HMRC Leave a Voicemail on a Mobile Phone?

HMRC may leave a voicemail from 0300 200 3884 saying that another contact attempt will be made. That number is not intended for general enquiries.

Should Someone Call Back the Number Displayed?

The displayed number should not be used automatically because caller information may be misleading. The relevant department’s details should be found independently before returning the call.

Does HMRC Make Automated Telephone Calls?

HMRC uses automated debt-management voice prompts for some customers who have fallen behind with payments. These messages should not request personal or financial information.

Can HMRC Call About a Tax Refund?

Some genuine refund processes exist, but an unsolicited caller requesting immediate bank or card details should be treated cautiously.

Published scam examples specifically warn about refund offers seeking financial information.

Will HMRC Threaten Arrest Over the Phone?

HMRC says it will never threaten arrest or leave a voicemail threatening legal action. An automated lawsuit or arrest message should be ended and reported.

What Happens if a Genuine Hmrc Call is Missed?

The caller may leave a message or try again, depending on the campaign. A genuine tax matter can still be verified through an appropriate published contact route.

Can HMRC Contact Someone Through WhatsApp?

Tax-related reminders may appear through the subscribed UK government WhatsApp channel as one-way alerts. HMRC states that it will not use WhatsApp for other communication.

Note: Contact methods and reporting routes may change. Unsupported competitor statistics and case studies were excluded. The cited phishing figures are UK-wide, not HMRC-specific.