If you run a business, earn property income, or have a side hustle, it’s natural to wonder what HMRC can see. Can they get access to your bank account? Can they ask your bank for information – or even take money directly?
The truth is that HMRC can access your bank information under certain conditions. But it cannot do so freely or arbitrarily. There are formal powers, approval routes, and legal safeguards in place. If you’re staying on top of your tax obligations, the odds of facing this kind of scrutiny are very low.
In this guide, we’ll explain exactly when and how HMRC can request information or recover money from a bank account, what triggers that kind of action, and what you can do to stay on the right side of the process.
Key takeaways
- HMRC can access bank data, but only with formal powers like FINs or Schedule 36 notices, and usually with notice.
- Mixing personal and business finances increases scrutiny, especially for sole traders or directors using personal accounts.
- You don’t need to approve access: HMRC can bypass consent in some cases, provided legal safeguards are met.
- Most investigations start with a trigger, such as inconsistent returns or unexplained income.
What HMRC can (and can’t) do
HMRC does not have the power to casually monitor your account activity or ‘log in’ like a bank user. However, it can obtain information from financial institutions or from you directly (and in some cases, collect money from your account) by exercising powers granted under specific tax legislation.
These powers include:
- Financial Institution Notices (FINs)
- Schedule 36 information notices (formal, written requests for information under the Finance Act 2008)
- Direct Recovery of Debts (DRD)
- Debt enforcement powers, including asset seizure in rare cases
Each of these tools comes with thresholds, authorisation requirements, and procedural safeguards. If they’re being used, there’s usually a clear reason. Let’s break each one down.
Financial Institution Notices (FINs)
HMRC can request your bank data using a Financial Institution Notice (FIN). FINs were introduced under the Finance Act 2021 as an extension of Schedule 36 of the Finance Act 2008. They allow HMRC to request information – including bank statements – directly from a financial institution, without the taxpayer’s approval or an independent tax tribunal’s approval.
However, this isn’t a free-for-all. A FIN must meet strict conditions:
- The information must be reasonably required to check a known taxpayer’s position or recover a tax debt.
- It must be proportionate – in other words, the bank should be able to provide it without unreasonable burden.
- The request must be approved by an authorised and trained HMRC officer.
- The taxpayer must be told why the information is needed, unless a tribunal agrees that doing so might undermine the purpose of the request.
How often does HMRC use FINs?
In the most recent reporting year (April 2024–March 2025), HMRC issued 1,307 FINs (up from 1,143 the year before). Just four were used for debt collection; the rest related to tax compliance checks. Over 200 proposed FINs were formally rejected by HMRC’s authorised officers, demonstrating that internal scrutiny is in place.
For perspective, HMRC carried out over 316,000 compliance checks in the same period – meaning FINs are used in only a fraction of investigations.
- How to check if HMRC has processed your tax return
- Corporation Tax for limited companies
- Can HMRC take my house for limited company debt?
Schedule 36 information notices
Schedule 36 of the Finance Act 2008 also gives HMRC broader powers to request information that is ‘reasonably required’ to check a tax position.
There are three key types of notice:
- Taxpayer notice – sent directly to you. No extra approval is usually needed.
- Third-party notice – sent to someone else (e.g. your accountant or bank). Requires your agreement or a tribunal’s approval.
- Financial Institution Notice (FIN) – already covered above.
In short, HMRC can request information from you or about you, but it generally needs a valid reason and sometimes permission from a tribunal.
Direct Recovery of Debts (DRD)
The DRD regime, introduced in 2015, allows HMRC to recover unpaid tax directly from a debtor’s bank or building society account. It’s a debt enforcement power, not an investigatory one, and it can only be used where:
- The debt is finalised (i.e. no active appeal)
- The total amount owed is £1,000 or more
- HMRC has attempted to contact you multiple times
- A face-to-face visit has taken place
- You are left with at least £5,000 across your accounts afterwards
HMRC cannot use DRD secretly. Once it identifies funds, it must notify you, freeze the required amount (without transferring it), and allow 30 days to object or appeal. If you disagree with the action, you can challenge it in the County Court.
This power was used just 19 times in the two years before the pandemic. As of 2026, it’s in a ‘test and learn’ phase, with a full rollout planned for April.
What does HMRC look for in my bank statements?
HMRC doesn’t request bank statements at random. Most of the time, they’re trying to verify that your declared figures line up with actual cash flows. According to HMRC’s own manuals, private bank statements are not to be requested as a matter of course, but may be deemed reasonable where:
- Records are missing, incomplete, or unreliable
- Large sums are unvouched or unexplained
- Business and personal finances are muddled
Common reasons for a bank account check
HMRC doesn’t ask to see bank account data without reason. While routine checks do happen, most requests are triggered by something specific, such as an inconsistency, a discrepancy, or a concern about undeclared income. These aren’t always signs of wrongdoing, but they are signs that HMRC needs to take a closer look.
Below are some of the most common situations where HMRC might request bank information or begin a formal compliance check.
1. Inaccurate or inconsistent tax returns
Returns with repeated errors, odd fluctuations, or mismatched figures across VAT and Self Assessment can appear as red flags. Even unintentional mistakes may prompt HMRC to dig deeper, especially if numbers shift significantly year to year. If clarity is lacking, they may request bank data to cross-check what’s really going on.
2. Unexplained or disproportionate wealth
If someone reports modest income but owns high-end property, drives luxury cars, or regularly takes expensive holidays, HMRC may ask how those are funded. Often, it’s not about criminal suspicion but about confirming whether the money came from loans, gifts, or already-taxed sources.
3. Income doesn’t match your sector or lifestyle
If your declared income looks too low for your sector – especially in cash-heavy industries such as hospitality or trades – or doesn’t fit with your lifestyle, HMRC might investigate further. HMRC uses sector benchmarks and lifestyle estimates to assess credibility. If things don’t align, bank statements may be requested to fill in the picture.
4. Third-party tip-offs or external data
Investigations sometimes start with info from elsewhere: a tip-off from a disgruntled ex-employee, a data share from a bank, or a flag raised by another government agency. If that contradicts your tax filings, HMRC may move to verify the facts via your financial records.
5. Voluntary disclosures or past compliance issues
If you’ve disclosed underpaid tax, HMRC will often review your bank history to confirm the numbers stack up. Likewise, if you’ve had compliance checks before, repeated patterns or new triggers may lead to renewed scrutiny.
Can HMRC access personal bank accounts?
Yes, HMRC can access personal bank accounts, but only where it’s justified and proportionate. In practice, this happens through formal information notices, which may cover both personal and business accounts if needed to assess a tax position. This is especially likely when business income runs through personal accounts or when finances are blurred.
That’s why separating your finances matters, especially if you’re a sole trader, landlord, or company director. Mixing personal and business transactions can make it harder to show what’s already been taxed and may prompt HMRC to look more closely. The simplest way to stay compliant is to ensure that all company funds are held in the company’s name.
Will HMRC tell me before requesting bank data?
Most of the time, HMRC will write to you before requesting information. During a standard compliance check, they’ll explain what they’re reviewing and what documents they need – and if they issue a third-party notice (for instance, to your bank), you’ll usually get a copy.
But not all routes guarantee notice. Under Financial Institution Notices (FINs), HMRC can request your bank data directly, without telling you, if a tribunal agrees that informing you could jeopardise the inquiry. And for Direct Recovery of Debts (DRD), although HMRC doesn’t need court approval, they must notify you and give you 30 days to object before taking any money.
Can HMRC freeze or seize my bank account?
Freezing someone’s bank account is not part of HMRC’s normal toolkit. In routine civil compliance work, even during a tax investigation, HMRC does not have the power to freeze funds.
However, in rare cases involving suspected fraud, tax evasion, or money laundering, HMRC may apply to the courts for a freezing order or asset seizure. These are criminal enforcement tools and usually require coordination with other agencies. In other words, they’re not used lightly.
Separately, HMRC can use Direct Recovery of Debts (DRD) to take money from an account with a finalised tax debt, but this follows a regulated process – including a face-to-face visit, formal notice, and time to challenge the action.
What to do if HMRC contacts you
If you receive a letter, phone call or email from HMRC about your tax affairs:
- Don’t ignore it. Contact the officer or team named in the letter.
- Check it’s genuine. HMRC scams do exist, so verify that any communications are legitimate.
- Reply promptly. Delays can make things worse or escalate scrutiny.
- Use your accountant. If you have a tax agent, they can reply on your behalf.
- Keep records. Save all correspondence and note details of calls.
Common myths about HMRC and your bank account
Some widely shared assumptions about HMRC’s powers don’t hold up under scrutiny. Here are four of the most common misunderstandings.
1. “HMRC can see my bank account whenever it wants”
Many believe HMRC has live access to bank accounts. It doesn’t. To obtain statements or transaction data, HMRC must use legal powers such as Schedule 36 information notices or Financial Institution Notices (FINs). These powers only apply when information is reasonably required for a compliance check or investigation, not for general monitoring.
2. “HMRC needs my permission before it can access bank data”
A common assumption is that HMRC cannot obtain bank information unless the taxpayer has agreed to it. That assumption isn’t correct. While many third‑party information requests still require either taxpayer consent or approval from an independent tax tribunal, Financial Institution Notices allow HMRC to require banks and other financial institutions to provide information without either. These notices are subject to strict safeguards and internal authorisation, but they do not depend on the taxpayer’s permission.
3. “HMRC can take money from my bank account without warning”
HMRC can only withdraw funds directly from a bank account under the Direct Recovery of Debts (DRD) regime, and only after following a set process. The debt must be final, exceed £1,000, and leave at least £5,000 across your accounts. You must also be given notice and a 30-day objection window before any funds are taken.
4. “If HMRC contacts me, it means I’ve done something wrong”
Being contacted doesn’t necessarily mean wrongdoing. Many checks are triggered by data mismatches or algorithmic flags. You may have done nothing wrong, but you will need to respond clearly and promptly, with proper records.
Staying compliant starts with clarity
HMRC’s powers have grown, and with tools like FINs and DRD now in routine use, the tax office can obtain financial information more easily than ever before. That’s why keeping your affairs in order matters. Maintaining clear, accurate records, separating personal and business finances, and filing on time all help reduce the risk of scrutiny. And when your tax affairs become more complex, seeking expert advice can make all the difference.
And if you’re forming a company or reviewing your current setup, we can help. At Rapid Formations, we help businesses get up and running with future-proof foundations.
Join The Discussion