What to do if…
you receive a letter demanding payment for an official filing you did not submit
Short answer
Do not pay, scan a QR code, click a link, or reply using the letter’s details until you have verified it through an official route you found independently.
Do not do these things
- Do not call the phone number on the letter, click links, scan QR codes, or pay using its instructions until you have checked it independently.
- Do not give personal, tax, bank, login, or business details just because the letter looks official.
- Do not panic-pay to stop enforcement; urgency and threats can be pressure tactics.
- Do not throw the letter away; keep it and the envelope.
- Do not forward the QR code or payment link to someone else in a way that might prompt them to open it.
What to do now
- Mark it as unverified. Put the letter aside and decide that you will only use contact details from GOV.UK, the organisation’s official website, your secure online account, or a known professional adviser.
- Record what it says without acting on it. Photograph or scan the whole letter and envelope. Write down the organisation name, reference numbers, alleged filing type, period, amount, deadline, payment route, QR code wording, and return address.
- Check the organisation through an official route you found yourself.
- If it claims to be from HMRC, check HMRC guidance on genuine letters and HMRC QR codes, then use a GOV.UK route or your official tax account.
- If it claims to be from Companies House, check Companies House scam guidance on GOV.UK and do not use any payment details, web page, or QR code from a suspicious letter.
- If it claims to be from DVLA, a local authority, a court, or a regulator, search GOV.UK or the body’s official website and use only the published contact route there.
- Check your own records once. Look for a submission receipt, confirmation email, online account message, accountant email, or filing reference for the filing named in the letter. If it is about a company, check the public Companies House record for what has actually been filed.
- Ask only for confirmation through the verified route. Use wording like: “I received a letter saying I may owe a penalty for a filing I did not submit. I am contacting you through details I found independently. Can you confirm whether this reference is genuine and whether my record shows a missing filing or penalty?”
- If it looks like fraud or identity misuse, take one protective action.
- If a company appears to be using your name or address without permission, use the GOV.UK Companies House route for reporting personal details used without permission.
- If you are in England, Wales, or Northern Ireland and suspect fraud, report it to Report Fraud.
- If you are in Scotland and suspect fraud, report it to Police Scotland on 101, or use 999 if there is an immediate emergency.
- If you have already paid, shared bank details, or entered card details, contact your bank immediately using the number on your card or in your banking app.
- If it relates to a business, alert the right person calmly. Tell the accountant, company secretary, director, or filing contact: “We have received an unverified penalty notice. I am checking it through official channels. Please do not respond using the details on the letter unless it is confirmed genuine.”
What can wait
- You do not need to decide immediately whether this is a scam, an error, or a genuine penalty.
- You do not need to write an appeal, explanation, complaint, or detailed response until the notice has been verified.
- You do not need to pay to make the feeling of urgency go away before the organisation confirms that the penalty is real and connected to you or your business.
Important reassurance
A careful pause is reasonable here. Official-looking letters can be scams, genuine notices, or mistakes, and checking through a trusted route helps prevent both paying the wrong person and giving away sensitive information.
Scope note
These are first steps to verify what is real and reduce immediate risk. If the notice is genuine, later decisions about payment, correction, appeal, fraud reporting, or identity misuse may need specialist help.
Important note
This is general information for immediate harm-prevention, not legal, financial, tax, or professional advice. Processes and contact routes vary by organisation, so use independently found official details before paying, sharing information, or making admissions.
Additional Resources
- GOV.UK — Check if a letter you’ve received from HMRC is genuine
- GOV.UK — Check if a QR code on a letter you've received from HMRC is genuine
- GOV.UK — Reporting scams pretending to be from Companies House
- GOV.UK — Report a company using your personal details without your permission
- GOV.UK — Avoid and report internet scams and phishing
- National Cyber Security Centre — Phishing scams: how to spot and report them
- Police.uk
About this guide
This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.