What to do if…
a government agency contacts you demanding information and you are unsure what you must provide
Short answer
Pause and verify the request using independently found official contact details. Then ask for the request in writing and the legal basis/power for the information they say you must provide before you share anything.
Do not do these things
- Do not give information “on the spot” on a call, at your door, or via a link in an email/text.
- Do not rely on caller ID, email display names, or letterhead as proof it’s genuine.
- Do not send original documents (passport, birth certificate) unless you have confirmed the request is genuine and you are following the organisation’s official instructions.
- Do not “over-share” (extra documents, full device access, full bank statements) just to make it go away.
- Do not ignore a formal-looking letter without checking—some requests have deadlines, but you can often ask for clarification or more time once verified.
What to do now
- Break the live contact safely. If this is a call, say: “I can’t deal with this right now. I’ll call back via your official number.” Then hang up. If it’s an email/text, don’t reply and don’t click anything.
- Verify it independently (not using their contact details).
- Find the agency’s main contact details on GOV.UK (or the agency’s official website) and use those to call back.
- If it claims to be HMRC, use HMRC’s official “check if a call is genuine” guidance rather than trusting the caller.
- If it looks like phishing, report it (and stop engaging).
- Forward suspicious emails to report@phishing.gov.uk.
- Forward suspicious text messages to 7726 (free) to report to your mobile provider.
- Get the request in writing, with specifics. Ask for a letter/email that includes:
- exactly what information they want (itemised),
- why they want it (purpose),
- the legal power/basis they’re relying on (not just “it’s required”),
- the deadline and how to respond,
- a reference number and contact/team name.
- Sort it into one of three buckets (to reduce panic).
- Voluntary / routine: you can ask questions, narrow scope, or refuse some items.
- Compulsory notice: it cites a specific power/notice and a deadline.
- Police / law enforcement: they want an interview, statement, or “a chat”. If you can’t tell: treat it as unclear and do not provide information yet.
- Narrow scope and use a safe delivery method. Once verified, ask: “Please confirm the minimum information you require, and how to provide it securely.” Use the organisation’s official portal/address from their website (not an emailed link) where possible.
- If police want an interview/statement, pause for legal advice first.
- You can say you will not answer questions until you’ve had legal advice.
- If you’re at a police station (arrested or interviewed there), ask for free legal advice and the duty solicitor if you don’t have your own solicitor.
- Keep a simple evidence trail. Note date/time, who contacted you, what they asked for, what you did, and the official details you used to verify. Keep copies/screenshots of messages and letters.
- If this is about personal data being mishandled, use the UK data protection complaint route. Start with the organisation, then escalate to the Information Commissioner’s Office (ICO) if needed.
What can wait
- You do not need to decide today whether you “agree” with the request—first confirm it’s real and what power it’s based on.
- You do not need to gather every possible document right now—wait until the request is narrowed and confirmed.
- You do not need to explain your whole situation on first contact—start with verification, written scope, and secure delivery.
Important reassurance
It’s normal to feel pressured when someone claims to be “the government” and demands information. Real agencies do contact people unexpectedly, and scams also imitate them. Taking a short pause to verify and get it in writing is a reasonable, protective first step.
Scope note
This is first steps only, to help you avoid irreversible mistakes and buy time. Depending on the agency and the type of notice, you may need specialist advice on your exact obligations.
Important note
This guide is general information, not legal advice. If you think you’ve received a formal legal notice, face penalties, or police/regulators want a statement or interview, consider getting legal advice promptly before responding.
Additional Resources
- https://www.gov.uk/arrested-your-rights/legal-advice-at-the-police-station
- https://www.gov.uk/report-suspicious-emails-websites-phishing
- https://www.ncsc.gov.uk/section/respond-recover/phishing
- https://www.ncsc.gov.uk/collection/phishing-scams/report-scam-text-message
- https://www.gov.uk/guidance/check-if-a-phone-call-youve-received-from-hmrc-is-genuine
- https://www.gov.uk/government/publications/phishing-and-bogus-emails-hm-revenue-and-customs-examples/phishing-emails-and-bogus-contact-hm-revenue-and-customs-examples
- https://ico.org.uk/make-a-complaint/data-protection-complaints/