From Spring 2026, HMRC is shifting to digital-by-default for anyone who uses its online services or app, sending letters to your personal tax account instead of your mailbox. HMRC received more than 135,500 reports of suspected scams since February 2025, which means spotting genuine HMRC communications from fakes has never been more important.

Digital Switch Year: 2026 · Target Users: Online services and app users · Delivery Method: Email alerts to personal tax account · Paper Letters: Ended for most taxpayers · Announced Date: 26 Nov 2025

Quick snapshot

1Confirmed facts
2What’s unclear
  • Exact opt-out process for digital letters — HMRC has not published full details yet
  • Whether digitally excluded customers will receive a formal notification before the transition
  • Specific regional rollout timing within Spring 2026
3Timeline signal
  • 26 Nov 2025 — Digital-by-default announced (Oldfield Advisory)
  • 31 Jan 2026 — Self Assessment deadline (Infosecurity Magazine)
  • Spring 2026 — Digital letters rollout begins (Oldfield Advisory)
4What’s next
  • Email alerts will replace paper letters for most taxpayers who use HMRC online services (Infosecurity Magazine)
  • Phishing websites continue to be shut down — HMRC shuttered 25,000 of them (Infosecurity Magazine)
  • MFA becomes mandatory for agents from April 2026 (Infosecurity Magazine)
Label Value
Policy Name Modernising HMRC’s outbound digital communications
Start Date 2026
Access Via Personal tax account or HMRC app
Paper Alternative Opt-out available

Are HMRC still sending letters?

Yes — but not for much longer in their current form. HMRC is phasing out paper letters for customers who use its online services or app, replacing them with digital communications stored in your personal tax account. The policy, announced in November 2025 and rolling out from Spring 2026, marks a fundamental shift in how HMRC delivers routine tax correspondence.

Digital by default policy

The “digital by default” approach means HMRC will automatically send digital letters to anyone with an online tax account. You’ll receive an email alert directing you to log in and view your new correspondence — no more waiting for the post. The same information that appeared on paper (tax codes, payment reminders, notices to file) will now live in your account.

  • New and existing customers using HMRC’s digital services will automatically receive digital letters instead of letters by post (GOV.UK (HMRC official))
  • Taxpayers who already use HMRC’s online services or app will receive email alerts directing them to view new correspondence (Oldfield Advisory)

Who gets paper letters

Not everyone loses paper access. HMRC has confirmed that an opt-out will be available for those who genuinely need postal communications, and digitally excluded customers — those without internet access or who cannot use digital services — will continue receiving paper letters. If you’re unsure whether you’ll be affected, check your personal tax account settings or contact HMRC directly.

What to watch

HMRC has not yet published full details on the exact opt-out process. Watch for official guidance on GOV.UK in the months leading up to the rollout.

Do HMRC contact you via email?

HMRC does send emails — but only in a very specific way. Genuine HMRC emails always come from addresses ending in @hmrc.gov.uk and will never ask you to reply with personal or financial information. If you receive an unexpected email from HMRC claiming you have a tax refund waiting, it’s a scam.

Email alerts for digital letters

Once the digital rollout begins, HMRC will use email to alert you that a new letter has arrived in your personal tax account. This is not the same as HMRC contacting you out of the blue about a refund or demanding immediate payment. Those alerts simply nudge you to log in and check your account — nothing more.

Genuine HMRC email checks

GOV.UK maintains a dedicated page listing every genuine HMRC email address. If an email claims to be from HMRC but the sender address doesn’t match, report it. The email verification page was last updated on 14 April 2026, so check it regularly if you’re unsure.

The upshot

HMRC uses email only to direct you to your account — genuine emails never contain payment links, attachment requests, or demands for bank details.

What does a genuine letter from HMRC look like?

Understanding what real HMRC correspondence contains is your first line of defence against impersonators. Fake HMRC letters request bank statements, accounts, VAT returns, and ID photos — genuine ones don’t.

Features of real HMRC letters

Genuine HMRC letters contain your UTR (Unique Taxpayer Reference), official letterhead, and specific information tied to your tax record. They explain what action HMRC is taking and why, referencing your actual tax situation. Letters about inheritance tax feedback calls occurred between 6 October and 14 November 2025, while National Insurance contributions letter CA4361 was sent for potential overpayments.

Digital vs paper formats

From 2026, the distinction blurs — the same information appears in your digital tax account as it would on paper. Digital letters are stored securely, timestamped, and accessible whenever you log in. If you’re verifying a letter, the GOV.UK letter verification page (last updated 16 April 2026) is your definitive reference.

Why this matters

Secure storage in your personal tax account means you can always refer back to HMRC’s communications — no more worrying about lost paperwork.

How to spot a fake HMRC email?

Scammers don’t just fake letters — they flood inboxes with HMRC impersonation emails, particularly around Self Assessment season. HMRC received more than 135,500 reports of suspected scams since February 2025, with 4,800 of those specifically targeting Self Assessment filers. Learning to recognise the fakes is a practical skill for anyone who pays tax.

Common scam signs

Scammers use urgency and threats to pressure you into acting without thinking. Watch for phrases like “final notice”, “immediate action required”, or “criminal prosecution” — HMRC does not communicate that way. Fake emails often include alarming subject lines, generic greetings (“Dear customer”), and links to convincing but fraudulent websites.

  • Tax-themed scams are particularly effective at this time of year because they combine urgency around deadlines and fear of penalties and fines with the trust that many have in the HMRC brand (Infosecurity Magazine)
  • Scammers use urgency and threats like ‘final notice’, ‘immediate action’, or ‘criminal prosecution’ (Oldfield Advisory)
  • Caller ID can be spoofed — do not trust it as proof that a call or message is genuine (Infosecurity Magazine)

Verification steps

Before clicking any link, verify the sender’s email address against GOV.UK’s official list. Report suspicious emails to phishing@hmrc.gov.uk and forward scam texts to 60599. HMRC urges filing early to spot scams more easily — the earlier you file your return, the less time scammers have to target you with urgency tactics around the deadline.

Bottom line: HMRC emails end in @hmrc.gov.uk, never ask for banking details, and will never offer refunds by email. If something feels urgent or too good to be true, verify it directly on GOV.UK.

How to check if an HMRC letter is genuine?

With paper letters on the way out, verifying HMRC correspondence means knowing where to look — and the official GOV.UK verification pages are your most reliable resource.

Official verification methods

GOV.UK maintains separate pages for verifying genuine HMRC emails, texts, and letters. Each page is regularly updated — the email verification page was last updated on 14 April 2026, the letter verification page on 16 April 2026, and the text verification page on 22 April 2026. Cross-reference any correspondence you receive against these official resources.

Contact HMRC securely

If you’re unsure whether a letter or email is genuine, contact HMRC through the official app or your online tax account — not by replying to the message you received. HMRC’s app and online services provide secure, verifiable channels for correspondence. Scam emails targeting agents often ask to update Anti-Money Laundering (AML) supervision details — a reminder that even professional advisers are in scammers’ sights.

The catch

HMRC will never call you unexpectedly demanding immediate payment or asking you to read your card details over the phone. Debt management calls remind of overdue payments but never solicit details.

How to access HMRC digital letters?

Once the digital rollout begins, accessing your HMRC letters requires an active personal tax account. Here’s what you need to know about getting set up and staying secure.

HMRC app and online services

The HMRC app and your personal tax account via GOV.UK are the two main access points for digital letters. Both platforms allow you to view correspondence, check your tax position, and manage communications preferences. The app is available on iOS and Android, while the online account works through any browser.

  • Log in to your personal tax account through GOV.UK (official government portal) to view all digital correspondence
  • Download the HMRC app from your device’s app store for mobile access to your tax account
  • MFA (multi-factor authentication) is mandatory for agent accounts from April 2026 — HMRC will send emails to selected agents from 31 March 2026 about activation (GOV.UK (HMRC official))

Step-by-step access guide

To access your HMRC digital letters, start by logging into your personal tax account on GOV.UK. Navigate to your messages or correspondence section — any new letters from HMRC will appear there as notifications. If you’ve enabled email alerts, you’ll receive a message to your registered email address whenever new correspondence arrives. HMRC will never ask you to provide your login credentials by email or text.

The implication

With digital letters stored in one place, you have a complete audit trail of every HMRC communication — no more hunting through filing cabinets or worrying about lost post.

Timeline

Five dates shape the HMRC digital letters story — and the Self Assessment deadline sits at the centre of it.

Date Event
HMRC begins tracking scam reports; scammers intensify Self Assessment targeting (Infosecurity Magazine)
12-month scam referral period ends — 170,000+ referrals received, including 47,000+ fake tax refund claims (GOV.UK (HMRC official))
HMRC announces digital-by-default policy for Spring 2026 rollout (Oldfield Advisory)
Self Assessment filing deadline — scams peak around this date annually (Infosecurity Magazine)
Digital letters rollout begins for online services and app users (Oldfield Advisory)

Clarity on what’s confirmed vs. unclear

Confirmed facts

  • Digital default for existing online users in 2026
  • Email alerts to view in account
  • Opt-out available for postal communications
  • Digitally excluded customers continue receiving paper letters
  • HMRC shuttered 25,000 phishing websites
  • Late payment interest at 7.75% for Self Assessment

What remains unclear

  • Exact opt-out process details — not yet published
  • Whether digitally excluded customers receive advance notification
  • Specific rollout timing within Spring 2026

What experts say

Millions of people file a tax return each year and scammers mimic HMRC to try and catch unsuspecting victims out.

Lucy Pike, Chief Security Officer at HMRC

Tax-themed scams are particularly effective at this time of year, because they combine urgency around deadlines and fear of penalties and fines with the trust that many have in the HMRC brand.

Matt Cooke, EMEA Cybersecurity Strategist at Proofpoint

For UK taxpayers who file Self Assessment, the shift to digital letters is a practical change that requires one simple action now: make sure your personal tax account is active, your email address is correct, and you know how to log in. The Self Assessment deadline of 31 January 2026 is the next major milestone — file early, verify any HMRC correspondence against GOV.UK, and report anything suspicious to phishing@hmrc.gov.uk. HMRC shuttered 25,000 phishing websites, but scammers keep creating new ones; your vigilance is the final line of defence.

Related reading: Royal Mail special delivery costs · Home Office contact number

Scammers often mimic HMRC Simple Assessment letters, so taxpayers should always follow a verify and respond guide to confirm authenticity before acting.

Frequently asked questions

What is HMRC digital by default?

Digital by default is HMRC’s policy, rolling out from Spring 2026, to send letters electronically to your personal tax account instead of by post. If you use HMRC’s online services or app, you’ll receive email alerts when new correspondence is available — ending paper letters for most taxpayers who are already in the digital system.

How to login to HMRC personal tax account?

Visit GOV.UK and search for “personal tax account” — you’ll need your Government Gateway ID and password. If you don’t have one, you can create an account using your National Insurance number and passport or payslip details. Once logged in, all HMRC digital letters will appear in your messages section.

What is the HMRC app?

The HMRC app is a mobile application available on iOS and Android that lets you view your tax position, check your correspondence, and receive push notifications about new messages from HMRC. It’s the most convenient way to access your digital letters on the go.

Does HMRC send refunds automatically?

No. HMRC calculates your tax position and issues refunds automatically in some cases, but it will never notify you of a refund via email or text. If you receive an unexpected message claiming you have a tax refund waiting, it’s a scam. Genuine refund notifications appear in your personal tax account.

What are common HMRC scam tactics?

Scammers impersonating HMRC typically use urgency and threats — phrases like “final notice”, “immediate action required”, or “criminal prosecution” are red flags. They may send emails with links to fake websites designed to steal your login details, or call pretending to be HMRC demanding immediate payment. HMRC received more than 135,500 scam reports since February 2025 alone.

How to contact HMRC securely?

Contact HMRC through the official app, your online personal tax account, or the contact numbers listed on GOV.UK. Never reply directly to an email or text you suspect might be fake — instead, log into your account separately and check your messages there. Report suspicious emails to phishing@hmrc.gov.uk and scam texts to 60599.

What letters does HMRC typically send?

HMRC sends letters for a wide range of purposes: tax codes and coding notices, Self Assessment reminders, PAYE notices, VAT reminders, Making Tax Digital confirmations, Inheritance Tax correspondence, and National Insurance contributions letters (such as CA4361 for potential overpayments). From 2026, all these will be delivered digitally for online account holders.