HMRC Is Contacting Crypto Holders: How to Tell If It Is Real

HMRC has quietly added one of its most significant crypto-related disclosures to its official verified-contacts page: if you have traded in cryptoassets, the tax authority may now contact you by letter, email, or text message. That sentence sits on a GOV.UK guidance page updated on 5 August 2026, and it carries real weight for anyone who has bought, sold, or swapped digital assets. Knowing whether a message is genuine — and understanding why HMRC is reaching out in the first place — is now a practical crypto tax concern, not just a cybersecurity one.

What HMRC's Verified-Contacts Page Actually Says About Crypto

The GOV.UK page titled "Check genuine HMRC contact that uses more than one communication method" is updated whenever HMRC authorises a new outreach campaign. Its purpose is simple: if a type of contact appears on that page, it is genuine. If it does not, treat it as a potential scam.

The cryptoasset entry, word for word

The relevant entry reads: "If you have traded in cryptoassets, HMRC may contact you by letter, email or text message." There is no date window attached to this entry, which distinguishes it from most others on the page. Research campaigns by third-party agencies such as Verian, IFF Research, or Ipsos are all time-limited. The cryptoasset contact entry carries no end date, meaning HMRC treats this as an ongoing, standing programme rather than a one-off initiative.

That is a deliberate signal. HMRC is not running a short pilot on crypto compliance — it is embedding cryptoasset holders as a permanent category of taxpayers it will contact proactively and repeatedly.

What triggers the outreach

The guidance does not specify exactly what activity triggers a contact, but read alongside other HMRC publications it is not hard to infer. HMRC receives data from UK-registered crypto exchanges under its existing data-gathering powers. It also now receives information from overseas platforms as the OECD's Crypto-Asset Reporting Framework (CARF) and the DAC8 equivalent come into force across participating jurisdictions. Where reported exchange data does not match a taxpayer's Self Assessment return — or where no return has been filed at all — HMRC has the information it needs to open a compliance check. The letter, email, or text you receive is likely the first step in that process.

Why This Matters If You Have Crypto Tax Obligations

There is a wider context here that makes this disclosure more than a housekeeping update. HMRC recently began including cryptoasset gains in its official Capital Gains Tax statistics for the first time, something we covered in detail when looking at how HMRC is now tracking crypto capital gains in official UK tax statistics. Tracking gains in statistics requires the underlying data. The standing contact entry on the verified-contacts page is the outward-facing consequence of HMRC having that data and acting on it.

Formal notices and the Data Acquisition and Exchange team

The same GOV.UK page contains a related entry that crypto holders should read carefully. It states that if you have received a formal notice or a formal notice of assessments by letter, HMRC's Data Acquisition and Exchange team may contact you or your representatives — by phone call or email — to discuss the matter and help you comply with HMRC's data-gathering legislation. This is a separate, more advanced stage. A formal notice is not an invitation to self-correct; it carries legal obligations. If you receive one, taking professional advice before responding is strongly recommended.

Self Assessment and the crypto tax calculator question

For most individual crypto holders, the relevant obligation is filing a Self Assessment return and reporting any capital gains or income from cryptoassets. Using a crypto tax calculator to compile an accurate gains summary — covering disposals, pooled cost basis under HMRC's section 104 rules, and the bed-and-breakfast 30-day rule — is the practical foundation of any compliant return. If HMRC contacts you and you have not yet filed, or if you think your previous returns may be incomplete, the window before any formal compliance action is the best time to get the numbers right.

The annual Capital Gains Tax allowance has been reduced substantially in recent years, meaning more crypto disposals now fall into chargeable territory than they did even two or three years ago. Many holders who assumed small trades were below any threshold will find on closer inspection that they were not.

How to Verify Whether HMRC Contact Is Genuine

The GOV.UK verified-contacts page is the single authoritative reference. The process for checking is straightforward.

Step-by-step verification

First, go directly to the GOV.UK verified-contacts page by typing the URL into your browser — do not click a link in any message you are trying to verify. Second, search the page for the type of contact you received (letter, email, text, or phone call) and the subject matter. Third, if the contact type and subject appear on the page, it is genuine. If they do not, do not engage and report it to HMRC's phishing address (phishing@hmrc.gov.uk for emails, or forward texts to 60599).

The scam risk is real and worth taking seriously. Fraudsters routinely impersonate HMRC, particularly around tax deadlines and when compliance campaigns are in the news. We have previously covered what a fake IRS letter targeting crypto holders looks like and what to do — the same verification-first principle applies to HMRC communications.

What HMRC will never do

The guidance is consistent on this point across multiple entries. HMRC will never ask for personal or financial information in a text message sent as part of a research survey. Multi-factor authentication codes sent by HMRC will never ask you to share them with anyone. If any communication asks you to click a link and enter payment details, card numbers, or banking credentials in response to an unexpected contact, it is a scam regardless of how official it looks.

Other Active HMRC Contact Campaigns in 2026

The verified-contacts page lists several other active campaigns that may be relevant to crypto holders or the self-employed more broadly. Understanding them reduces the risk of dismissing a genuine HMRC contact as suspicious.

Making Tax Digital research (Verian)

From 30 April 2026 to 4 September 2026, HMRC is working with the independent research agency Verian to understand how tax agents are experiencing Making Tax Digital for Income Tax and how they are supporting their clients. If you use an accountant or tax agent, they may have already been contacted. A separate Verian campaign running from 27 July to 30 October 2026 covers a related research strand. MTD for Income Tax has direct implications for crypto holders who report self-employment income or property income alongside their crypto gains.

IFF Research: small, mid-sized, and large business experience

Two IFF Research campaigns are active simultaneously. One, running from 20 July 2026 to 16 April 2027, covers agents and small to mid-sized businesses. Another, running from 3 August 2026 to 26 March 2027, covers large business customers. If you run a business that holds crypto on its balance sheet, or if your accountant is contacted on your behalf, either of these could be relevant.

High Income Child Benefit Charge reminders

From 6 July 2026 to 31 December 2026, HMRC is contacting people by letter or text to prompt them to check whether the High Income Child Benefit Charge applies. This is relevant to crypto holders because unrealised gains are not income, but realised gains can in some circumstances affect adjusted net income calculations, particularly where losses are not properly offset. If your adjusted net income exceeds £60,000 and you or your partner receive Child Benefit, you may need to file or amend a Self Assessment return.

Advance assurance pilot feedback

From 15 June 2026 to 30 June 2027, HMRC may contact taxpayers by phone or email to gather feedback on an advance assurance pilot. Advance assurance is a process by which taxpayers can seek HMRC's view on whether a specific transaction or arrangement will be treated in a particular way for tax purposes. For complex crypto structures — DeFi lending, tokenised real-world assets, or novel staking arrangements — this kind of pre-transaction clarity can be valuable, and the fact that HMRC is actively piloting and researching it suggests growing institutional appetite for engagement on these questions.

Practical Steps for Crypto Holders Right Now

If you receive any communication claiming to be from HMRC and referencing your cryptoasset activity, the sequence below protects you while keeping you compliant.

Immediate actions

Verify the contact type on the GOV.UK page before doing anything else. Do not call any number printed in a letter or text until you have confirmed it against the GOV.UK contact details for HMRC directly. If the contact is genuine, read it carefully and note any response deadline. HMRC compliance letters typically give a specific number of days to respond, and missing that window can escalate the enquiry.

Gather your transaction records. If HMRC is asking about cryptoasset activity, having a complete transaction history — covering every exchange, wallet transfer, and disposal — is essential. The earlier you compile this, the more options you have. Voluntary disclosure before a formal assessment is almost always treated more favourably than a response to a formal notice.

Longer-term compliance hygiene

HMRC's standing cryptoasset contact entry signals that compliance checks in this area are not going away. Building habits now — keeping records of acquisition costs, dates, and disposal proceeds for every transaction, calculating gains against HMRC's pooling rules each tax year, and filing on time — means that any future HMRC contact should be straightforward to respond to. The cost of good record-keeping is small. The cost of reconstructing years of transaction history under time pressure during a compliance enquiry is not.

Frequently Asked Questions

I received a text saying it is from HMRC about my crypto. Is it real?

It may be. The GOV.UK verified-contacts page confirms that HMRC can contact cryptoasset holders by text message. Verify by going directly to that page (type the URL, do not click the link in the text) and checking whether the contact type is listed. If it is, the message is likely genuine. If it is not, report it to 60599 and do not respond.

What does HMRC do with the crypto data it receives from exchanges?

HMRC uses data from UK exchanges under its statutory data-gathering powers to cross-check against Self Assessment returns. Where gains or income have not been reported, HMRC can open a compliance check or issue a formal notice of assessment. The verified-contacts guidance makes clear that the Data Acquisition and Exchange team may follow up such notices directly with taxpayers or their representatives.

If I have not filed crypto taxes, should I wait for HMRC to contact me?

No. Waiting for HMRC to contact you before correcting an underpayment typically results in higher penalties and interest than a voluntary disclosure. HMRC's Let Property Campaign and Worldwide Disclosure Facility are examples of frameworks that offer reduced penalties for proactive disclosure; similar principles apply to cryptoasset non-compliance. Taking advice and filing amended returns before a formal check begins is nearly always the better outcome.

Can I use a crypto tax calculator to prepare for a potential HMRC enquiry?

Yes, and it is one of the most practical things you can do. An accurate crypto tax calculator that applies HMRC's section 104 pooling rules, the 30-day same-asset rule, and the correct treatment of income events (staking rewards, airdrops, mining) will produce a gains summary you can present to HMRC. Make sure the tool you use is configured for UK tax rules specifically, as the treatment of pooling and allowable costs differs significantly from US or other jurisdictions.

What if I think an HMRC letter about crypto is a scam but I am not sure?

Do not respond to the letter directly. Instead, contact HMRC through the official GOV.UK contact page using independently verified phone numbers. Describe the letter and ask whether it is genuine. HMRC customer service can confirm whether a specific campaign or team sent the communication. Never call a number printed only in the suspicious letter itself.

Source: GOV.UK — Check genuine HMRC contact that uses more than one communication method