A new GOV.UK page and interactive reporting tool has been launched to report suspicious activity happening on an HMRC online account. This is initially aimed at individuals to help them quickly report suspicious activity in their HMRC online accounts.

HMRC is developing an agent route within the tool which it hopes to launch in early 2026. However, this tool can still be used by agents and by businesses – you just need to add your tax reference (VAT/CT etc) either where it says 'add NINO' or with additional info added to the email. 

How tax agents can use the tool

Acting on behalf of clients
The questions in the tool will be directed at the client, but tax agents can answer these based on the information provided by their clients or observed in client accounts. The tool will generate a prepopulated email to send to HMRC’s Fraud Prevention Centre (FPC), streamlining the reporting process. 

Editing the prepopulated email

Before sending, agents can review and edit the email generated by the tool. This allows them to clarify details, add context, or correct information to ensure HMRC receives the most accurate report possible. Agents should use this flexibility to indicate that they are acting on behalf of a client, add additional insights or tailor the report to specific client circumstances. If you are reporting multiple cases, you will need to include the name and tax ref (VAT/SA etc.) for each client in the email.

Keeping clients informed
Once a report is submitted, HMRC will investigate and keep both the customer and the agent informed of the outcome and any required actions. It may also contact the reporting person to gather more information. Agents can reassure clients that HMRC’s priority is to protect their data and correct any tax or payment records affected by fraudulent activity. 

Additional reporting routes

• Individuals can still report suspicious activity via their online account security console or by calling the online services helpdesk.
• Agents can also call the online security helpdesk to report suspicious activity on their client’s account.
• The new tool is an additional option, not a replacement for existing reporting channels.