Can HMRC access my bank accounts? 

If you’ve heard stories about HMRC raiding bank accounts, it’s natural to wonder what the tax office can actually see. The reality is far less dramatic. HMRC needs a legal power and a good reason before it can look at your account, and there are three main routes: Schedule 36 information notices, which request data from you or third parties such as banks; Financial Institution Notices, commonly known as FINs, a special type of third-party notice introduced in 2021; and Direct Recovery of Debts, known as DRD, which allows HMRC to take money from accounts to settle a finalised tax debt.

Each power comes with safeguards. Schedule 36 notices must seek information that is reasonably required to check your tax position, and third-party notices typically need your consent or a tribunal’s approval, except for FINs. DRD requires a formal process, including a face-to-face visit, a notice, and appeal rights, before any money moves.

In practice, HMRC uses these powers only when justified. In the 2024 to 2025 tax year, it issued 1,307 FINs, mostly for domestic enquiries, while conducting around 316,000 compliance checks overall. FINs were therefore used in only a small fraction of cases.

HMRC bank account access powers: What it can (and can’t) do

HMRC doesn’t have the power to casually monitor your account activity or ‘log in’ like a bank user. However, it can obtain information from financial institutions or from you directly (and in some cases, collect money from your account) by exercising powers granted under specific tax legislation.

These powers include:

• Financial Institution Notices (FINs)
• Schedule 36 information notices (formal, written requests for information under the Finance Act 2008)
• Direct Recovery of Debts (DRD)
• Debt enforcement powers, including asset seizure in rare cases

Each of these tools comes with thresholds, authorisation requirements, and procedural safeguards. If they’re being used, there’s usually a clear reason. Let’s break each one down.

Financial Institution Notices (FINs)

HMRC can request your bank data using a Financial Institution Notice (FIN). FINs were introduced under the Finance Act 2021 as an extension of Schedule 36 of the Finance Act 2008. They allow HMRC to request information – including bank statements – directly from a financial institution, without the taxpayer’s approval or an independent tax tribunal’s approval.

However, this isn’t a free-for-all. A FIN must meet strict conditions:

• The information must be reasonably required to check a known taxpayer’s position or recover a tax debt.
• It must be proportionate – in other words, the bank should be able to provide it without unreasonable burden.
• The request must be approved by an authorised and trained HMRC officer.
• The taxpayer must be told why the information is needed, unless a tribunal agrees that doing so might undermine the purpose of the request.

FINs aren’t that common, and only happen in relatively rare cases.

How often does HMRC use FINs?

In the reporting year (April 2024–March 2025), HMRC issued 1,307 FINs (up from 1,143 the year before). Just four were used for debt collection; the rest related to tax compliance checks. 208 proposed FINs were formally rejected by HMRC’s authorised officers, demonstrating that internal scrutiny is in place (almost 16% of applications, up from 10% the year before).

For perspective, HMRC carried out over 316,000 compliance checks in the same period – meaning FINs are used in only a fraction of investigations.

Schedule 36 information notices

Schedule 36 of the Finance Act 2008 also gives HMRC broader powers to request information that is ‘reasonably required’ to check a tax position.

There are three key types of notice:

• Taxpayer notice – sent directly to you. HMRC doesn’t need approval, and you can usually appeal, unless the request is for statutory records or HMRC has obtained tribunal approval.
• Third-party notice – sent to someone else, such as a supplier, customer or your accountant. This requires your agreement or a tribunal’s approval, and your adviser’s tax-advice communications with you are protected.
• Financial Institution Notice (FIN) – covered above.

In short, HMRC can request information from you or about you, but it generally needs a valid reason and, in some cases, permission from a tribunal. The government published draft legislation to modernise these powers in July 2026, so the details may change.

• How to check if HMRC has processed your tax return
• Corporation Tax for limited companies
• Can HMRC take my house for limited company debt?

HMRC bank account tax recovery: Direct Recovery of Debts (DRD)

The DRD regime, introduced in 2015, allows HMRC to recover unpaid tax directly from a debtor’s bank or building society account. It’s the power behind most stories about HMRC bank account tax raids, but in practice, it’s tightly controlled and rarely used.

Although it may seem like HMRC can simply access people’s savings, it is tightly restricted. It only allows HMRC to recover unpaid tax directly from a debtor’s bank or building society account in England, Wales, and Northern Ireland. It’s a debt enforcement power, not an investigatory one, and HMRC will only use it where:

• The debt is finalised (i.e., there’s no active appeal)
• More than £1,000 is owed
• HMRC has tried to contact you several times
• For individuals, HMRC agents have visited you face-to-face
• At least £5,000 will remain across your accounts afterwards

HMRC can’t use DRD secretly. Once it identifies funds, it must notify you and have the bank freeze the amount (without transferring it). You then have 30 days to object to HMRC, and if you disagree with its decision, you can appeal to the county court.

DRD was used just 19 times in the two years before it was paused during the pandemic. HMRC restarted it in September 2025 in a controlled ‘test and learn’ phase and began a wider rollout from April 2026.

Further changes may be coming. In June 2026, the government consulted on letting HMRC take automated monthly deductions for lower-value debts (up to around £10,000), with 14 days’ notice and affordability checks. These proposals aren’t yet law.

FIN vs Schedule 36 information notices vs DRD

FINs, introduced in 2021, let HMRC go straight to banks for information without your agreement or a tribunal’s approval. The data must be reasonably required, and HMRC normally has to tell you why it wants it.

Schedule 36 notices, from 2008, cover almost any tax enquiry. HMRC can send a taxpayer notice directly to you, which needs no extra sign-off. A third-party notice, sent to your bank or accountant, normally needs your consent or a tribunal’s approval.

DRD, from 2015, is an enforcement tool. If you owe finalised tax debt and have ignored HMRC’s demands, officers will visit you in person to discuss payment. Only then can HMRC instruct your bank to hold funds, giving you a 30-day objection window.

Unlike freezing orders, discussed below, DRD is civil and needs no additional court order, but strict safeguards apply. For example, at least £5,000 must remain across your accounts after HMRC takes its share.

Power	Target	Approval needed	When used	Stats and notes
Schedule 36 notice	Taxpayer or third party	Taxpayer notice usually needs none. Third-party notice needs taxpayer consent or a tribunal.	Checking a submitted return, reason to suspect unpaid tax, or other specific triggers, such as a penalty claim or transfer pricing enquiry.	Must be in writing and reasonably required. Failure to comply can bring penalties starting at £300 plus daily amounts. Cannot generally go back more than six years. Appeals allowed within 30 days.
FIN (Financial Institution Notice)	Financial institutions	None. No consent or tribunal approval needed.	Getting account data from banks, often when a taxpayer or accountant will not or can’t provide information, especially in cross-border cases or where other notices failed.	1,307 FINs issued in 2024 to 2025, up from 1,143 the year before. 1,134 domestic (about 87%) and 173 international. Only 4 were for debt collection. 208 proposed FINs were rejected internally. FINs were used in less than 0.5% of HMRC’s 316,000 compliance checks. Tribunal approval can waive notifying you if secrecy is needed.
DRD (Direct Recovery of Debts)	Debtor, individual or business	No tribunal. HMRC sets the hold after a formal process.	Collecting finalised tax or tax credit debts of more than £1,000, after multiple reminders and contacts have failed. HMRC must first visit you, verify the debt, and offer alternatives such as a Time to Pay arrangement.	Pre-pandemic, used only 19 times in two years. Paused during Covid, restarted in a test-and-learn phase from September 2025, with a wider rollout from April 2026. HMRC must notify you and give 30 days to challenge before funds move, and must leave at least £5,000 in your accounts.

4 common myths about HMRC and your bank account

1. “HMRC can see my bank account whenever it likes”

It can’t. HMRC has no live view of your account. It does receive some data automatically – such as the interest your bank pays you – but to see your statements, it needs to issue a formal notice and have a good reason.

2. “HMRC can empty my account without warning”

Under Direct Recovery of Debts, HMRC can only take money for a finalised debt of more than £1,000. It must visit individuals first, give you 30 days to object, and leave at least £5,000 across your accounts.

3. “Only people committing fraud get checked”

Most checks are triggered by errors, mismatched figures, or missing records rather than suspected fraud. Some are simply random. A check doesn’t mean HMRC thinks you’ve done anything wrong.

4. “HMRC won’t notice if I use my personal account for business”

Banks, card providers, and online platforms all share data with HMRC. Mixing business and personal money is one of the main reasons HMRC asks to see personal bank statements.

What does HMRC look for in my bank statements?

HMRC doesn’t request bank statements at random. Most of the time, they’re trying to verify that your declared figures line up with actual cash flows. According to HMRC’s own manuals, private bank statements aren’t to be requested as a matter of course, but may be deemed reasonable where:

• Records are missing, incomplete, or unreliable
• Large sums are unvouched or unexplained
• Business and personal finances are muddled

Author’s tip: In short, the more robust and separate your records are, the less likely HMRC is to look further.

5 Common HMRC bank account investigation triggers

HMRC doesn’t ask to see bank account data without reason. While routine checks do happen, most requests are triggered by something specific, such as an inconsistency, a discrepancy, or a concern about undeclared income. These aren’t always signs of wrongdoing, but they are signs that HMRC needs to take a closer look.

Below are some of the most common situations where HMRC might request bank information or begin a formal compliance check.

1. Inaccurate or inconsistent tax returns

Returns with repeated errors, odd fluctuations, or mismatched figures across VAT, Corporation Tax, payroll, and Self Assessment can appear as red flags. Even unintentional mistakes may prompt HMRC to dig deeper, especially if numbers shift significantly year to year. If clarity is lacking, HMRC may request bank data to cross-check what’s really going on.

2. Unexplained or disproportionate wealth

If someone reports modest income but owns high-end property, drives luxury cars, or regularly takes expensive holidays, HMRC may ask how those are funded. Often, it’s not about criminal suspicion but about confirming whether the money came from loans, gifts, or already-taxed sources.

3. Income doesn’t match your sector or lifestyle

If your declared income looks too low for your sector – especially in cash-heavy industries such as hospitality or trades – or doesn’t fit with your lifestyle, HMRC might investigate further. HMRC uses sector benchmarks and lifestyle estimates to assess credibility. If things don’t align, bank statements may be requested to fill in the picture.

4. Third-party tip-offs or external data

Investigations sometimes start with information from elsewhere: a tip-off from a disgruntled ex-employee, a flag raised by another government agency, or data HMRC receives automatically. HMRC’s Connect system cross-references information from banks, card payment providers, online platforms, such as eBay, Etsy, and Airbnb, and overseas tax authorities. If any of it contradicts your tax filings, HMRC may move to verify the facts via your financial records.

5. Voluntary disclosures or past compliance issues

If you’ve disclosed underpaid tax, HMRC may review your bank history to confirm the numbers stack up. Likewise, if you’ve had compliance checks before, repeated patterns, or new triggers may lead to renewed scrutiny.

Can HMRC access personal bank accounts?

Yes, HMRC can access personal bank accounts, but only where it’s justified and proportionate. In practice, this happens through formal information notices, which may cover both personal and business accounts if needed to assess a tax position. This is especially likely when business income runs through personal accounts or when finances are blurred.

That’s why separating your finances matters, especially if you’re a sole trader, landlord, or company director. Mixing personal and business transactions can make it harder to show what’s already been taxed and may prompt HMRC to look more closely. The simplest way to stay compliant is to ensure that all company funds are held in the company’s name.

Your limited company is a separate legal entity, so its money isn’t yours. A dedicated business account keeps the two apart and gives you a clean record if HMRC asks.

Will HMRC tell me before requesting bank data?

Most of the time, HMRC will write to you before requesting information. During a standard compliance check, they’ll explain what they’re reviewing and what documents they need. If they issue a third-party notice (for instance, to your accountant or a supplier), you’ll usually get a copy.

But not all routes guarantee notice. Under Financial Institution Notices (FINs), HMRC can request your bank data directly from your bank. Normally, you’ll be told why, but HMRC can skip telling you if a tribunal agrees that informing you could jeopardise the inquiry. And for Direct Recovery of Debts (DRD), HMRC doesn’t need court approval, but under current rules, it must notify you and give you 30 days to object before any frozen funds are taken.

Can HMRC freeze or seize my bank account?

Freezing someone’s bank account isn’t part of HMRC’s normal toolkit. In routine compliance work, even during a tax investigation, HMRC doesn’t freeze your accounts.

However, in rare cases involving suspected fraud, tax evasion, or money laundering, HMRC can apply to a magistrates’ court for an Account Freezing Order under the Proceeds of Crime Act 2002. In the most serious criminal cases, it can seek restraint orders or confiscation. These powers need court approval and aren’t used lightly.

Separately, where a tax debt is finalised and unpaid, HMRC has debt collection powers. Under Direct Recovery of Debts (DRD), it can freeze and then take money from your account, but only through a regulated process. That includes formal notice, time to object, and, for individuals, a face-to-face visit. In some cases, HMRC can also take control of business goods or start court proceedings to recover what’s owed.

What to do if HMRC contacts you

If you receive a letter, phone call, or email from HMRC about your tax affairs:

• Don’t ignore it. Contact the officer or team named in the letter.
• Check it’s genuine. HMRC scams do exist. HMRC will never ask for bank details or offer a refund by email or text, so use GOV.UK’s guidance to check if a contact is genuine.
• Reply promptly. Delays can make things worse or lead to more scrutiny.
• Use your accountant. If you’ve authorised them as your tax agent, they can reply on your behalf.
• Keep records. Save all correspondence and note details of calls.

How to stay compliant with HMRC

Staying compliant with HMRC from day one is the best way to avoid unwanted attention. Most HMRC checks are triggered by gaps, mismatches, or missed deadlines, not wrongdoing.

Here’s a breakdown of all the tips you need as a new business owner to stay compliant:

• Open a dedicated business bank account. Run all company income and spending through it, and pay yourself properly through salary, dividends, or recorded director’s loans. Don’t move money back and forth informally.
• Keep good records from the start. Save invoices, receipts, and bank statements, and keep company records for at least six years. Accounting software that links to your bank account makes this far easier.
• Know your deadlines. Your company must pay Corporation Tax nine months and one day after its year-end, and file its tax return (CT600) within 12 months. Accounts are due at Companies House nine months after the year-end, and a confirmation statement every year. As a director, your own Self Assessment return is due by 31 January.
• Watch the VAT threshold. You must register once taxable turnover goes over £90,000 in any rolling 12-month period. Check this monthly, not just at year-end.
• Register for PAYE before your first payday, even if you’re the only employee. Report each payment to HMRC on or before you pay it.
• Document dividends properly. Only pay dividends from available profits, and back each one with a board minute and a dividend voucher. Make sure the amounts match what you report on your personal tax return.
• Keep your company and personal returns consistent. Salary, dividends, and directors’ loans should match across your company accounts, payroll, and Self Assessment.
• Complete Companies House identity verification. All directors and people with significant control (PSCs) must now verify their identity. Keep your company details, registered office, and PSC information up to date.
• Fix mistakes early. If you spot an error, correct it or tell HMRC before it asks. Penalties are much lower when you come forward yourself.
• Get professional support. An accountant can prepare your returns, keep your figures consistent, and deal with HMRC for you if questions ever come up.

How Rapid Formations can help

At Rapid Formations, we help new founders stay compliant from the day their company is formed:

• Hassle-Free Compliance Service: we file your annual confirmation statement, maintain your statutory registers, and send deadline reminders. You also get expert support by phone and email, plus access to 450+ business document templates, including the board minutes and dividend paperwork you’ll need.
• VAT registration: our specialists prepare and submit your VAT application to HMRC and answer your VAT questions along the way.
• All Inclusive Package: company formation with VAT and PAYE registration and our compliance service included, so you’re set up correctly from the start.
• Confirmation statement filing: available as a standalone service if you just need this annual filing handled.
• Business banking: open a business bank account through our partners to keep your company finances separate from day one.
• London registered office: a professional address for official mail, so letters from HMRC and Companies House don’t go astray.

HMRC’s powers have grown, and with tools like FINs and DRD now in routine use, the tax office can obtain financial information more easily than ever before. That’s why keeping your affairs in order matters. Maintaining clear, accurate records, separating personal and business finances, and filing on time all help reduce the risk of scrutiny. And when your tax affairs become more complex, seeking expert advice can make all the difference.

If you’re starting a new company, our All Inclusive Package includes VAT and PAYE registration and our Hassle-Free Compliance Service, so you’re set up correctly from day one.