Unauthorised access of HMRC online accounts
Find out what you need to do if HMRC contacts you about unauthorised access to your online account.
What happened
HMRC鈥檚 security systems have detected unauthorised access to some customers鈥� online accounts.
This was an attempt to claim money from HMRC, not an attempt to take any money from you.
We have written to affected customers and taken action to protect these accounts.
We have:
- locked down affected accounts
- deleted log in credentials (Government Gateway user ID and passwords) to prevent future unauthorised access
- removed any incorrect information from tax records
- checked no other details were changed
You do not need to take any action.
If you have received a letter from HMRC
If your account has been affected, you鈥檒l receive a letter from us between 4 June 2025 and 25 June 2025.
If you want to access your HMRC account, follow the steps in your letter to set up an account for HMRC online services and create a new Government Gateway user ID and password.
If you have any concerns, email our fraud team at聽[email protected].
If you have not received a letter
It is unlikely that your account will have been affected. But you can check your recent account activity.
-
Go to account menu at the top of the screen and select profile and settings.
-
Go to sign-in details聽and select change.
-
From your security console, view the sign in history for your account and report any suspicious activity.
If you鈥檙e using the HMRC App, go to managing your sign in details and then sign in using your Government Gateway user ID and password.
Keeping your data safe
If you think someone has signed into your account without your knowledge you should change your password. You can change your password from your security console.
-
Go to your Government Gateway profile.
-
Select password settings.
You should also email [email protected] immediately.
If you receive emails, letters, calls or texts claiming to be from HMRC you should check the list of genuine HMRC contacts. You should report suspicious HMRC emails, texts, social media accounts and phone calls.
has advice on protecting yourself from phishing attacks and fraud.