If you run a business, earn property income, or have a side hustle, it’s natural to wonder what HMRC can see. Can they get access to your bank account? Can they ask your bank for information – or even take money directly?
The truth is that HMRC can access your bank information under certain conditions. But it cannot do so freely or arbitrarily. There are formal powers, approval routes, and legal safeguards in place. If you’re staying on top of your tax obligations, the odds of facing this kind of scrutiny are very low.
In this guide, we’ll explain exactly when and how HMRC can request information or recover money from a bank account, what triggers that kind of action, and what you can do to stay on the right side of the process.
HMRC does not have the power to casually monitor your account activity or ‘log in’ like a bank user. However, it can obtain information from financial institutions or from you directly (and in some cases, collect money from your account) by exercising powers granted under specific tax legislation .
These powers include:
Each of these tools comes with thresholds, authorisation requirements, and procedural safeguards. If they’re being used, there’s usually a clear reason. Let’s break each one down.
HMRC can request your bank data using a Financial Institution Notice (FIN). FINs were introduced under the Finance Act 2021 as an extension of Schedule 36 of the Finance Act 2008 . They allow HMRC to request information – including bank statements – directly from a financial institution, without the taxpayer’s approval or an independent tax tribunal’s approval.
However, this isn’t a free-for-all. A FIN must meet strict conditions:
In the reporting year (April 2024–March 2025), HMRC issued 1,307 FINs (up from 1,143 the year before). Just four were used for debt collection; the rest related to tax compliance checks. Over 200 proposed FINs were formally rejected by HMRC’s authorised officers, demonstrating that internal scrutiny is in place.
For perspective, HMRC carried out over 316,000 compliance checks in the same period – meaning FINs are used in only a fraction of investigations.
Schedule 36 of the Finance Act 2008 also gives HMRC broader powers to request information that is ‘reasonably required’ to check a tax position.
There are three key types of notice:
In short, HMRC can request information from you or about you, but it generally needs a valid reason and sometimes permission from a tribunal.
The DRD regime, introduced in 2015, allows HMRC to recover unpaid tax directly from a debtor’s bank or building society account. It’s a debt enforcement power, not an investigatory one, and it can only be used where:
HMRC cannot use DRD secretly. Once it identifies funds, it must notify you, freeze the required amount (without transferring it), and allow 30 days to object or appeal. If you disagree with the action, you can challenge it in the County Court.
This power was used just 19 times in the two years before the pandemic. As of 2026, it’s in a ‘test and learn’ phase , with a full rollout planned for April.
HMRC doesn’t request bank statements at random. Most of the time, they’re trying to verify that your declared figures line up with actual cash flows. According to HMRC’s own manuals , private bank statements are not to be requested as a matter of course, but may be deemed reasonable where:
HMRC doesn’t ask to see bank account data without reason. While routine checks do happen, most requests are triggered by something specific, such as an inconsistency, a discrepancy, or a concern about undeclared income. These aren’t always signs of wrongdoing, but they are signs that HMRC needs to take a closer look .
Below are some of the most common situations where HMRC might request bank information or begin a formal compliance check.
Returns with repeated errors, odd fluctuations, or mismatched figures across VAT and Self Assessment can appear as red flags. Even unintentional mistakes may prompt HMRC to dig deeper, especially if numbers shift significantly year to year. If clarity is lacking, they may request bank data to cross-check what’s really going on.
If someone reports modest income but owns high-end property, drives luxury cars, or regularly takes expensive holidays, HMRC may ask how those are funded. Often, it’s not about criminal suspicion but about confirming whether the money came from loans, gifts, or already-taxed sources.
If your declared income looks too low for your sector – especially in cash-heavy industries such as hospitality or trades – or doesn’t fit with your lifestyle, HMRC might investigate further. HMRC uses sector benchmarks and lifestyle estimates to assess credibility. If things don’t align, bank statements may be requested to fill in the picture.
Investigations sometimes start with info from elsewhere: a tip-off from a disgruntled ex-employee, a data share from a bank, or a flag raised by another government agency. If that contradicts your tax filings, HMRC may move to verify the facts via your financial records.
If you’ve disclosed underpaid tax, HMRC will often review your bank history to confirm the numbers stack up. Likewise, if you’ve had compliance checks before, repeated patterns or new triggers may lead to renewed scrutiny.
Yes, HMRC can access personal bank accounts, but only where it’s justified and proportionate. In practice, this happens through formal information notices, which may cover both personal and business accounts if needed to assess a tax position. This is especially likely when business income runs through personal accounts or when finances are blurred.
That’s why separating your finances matters, especially if you’re a sole trader , landlord, or company director . Mixing personal and business transactions can make it harder to show what’s already been taxed and may prompt HMRC to look more closely. The simplest way to stay compliant is to ensure that all company funds are held in the company’s name.
Most of the time, HMRC will write to you before requesting information. During a standard compliance check, they’ll explain what they’re reviewing and what documents they need – and if they issue a third-party notice (for instance, to your bank), you’ll usually get a copy.
But not all routes guarantee notice. Under Financial Institution Notices (FINs), HMRC can request your bank data directly, without telling you, if a tribunal agrees that informing you could jeopardise the inquiry. And for Direct Recovery of Debts (DRD), although HMRC doesn’t need court approval, they must notify you and give you 30 days to object before taking any money.
Freezing someone’s bank account is not part of HMRC’s normal toolkit. In routine civil compliance work, even during a tax investigation, HMRC does not have the power to freeze funds.
However, in rare cases involving suspected fraud, tax evasion, or money laundering, HMRC may apply to the courts for a freezing order or asset seizure. These are criminal enforcement tools and usually require coordination with other agencies. In other words, they’re not used lightly.
Separately, HMRC can use Direct Recovery of Debts (DRD) to take money from an account with a finalised tax debt, but this follows a regulated process – including a face-to-face visit, formal notice, and time to challenge the action.
If you receive a letter, phone call or email from HMRC about your tax affairs:
Some widely shared assumptions about HMRC’s powers don’t hold up under scrutiny. Here are four of the most common misunderstandings.
Many believe HMRC has live access to bank accounts. It doesn’t. To obtain statements or transaction data, HMRC must use legal powers such as Schedule 36 information notices or Financial Institution Notices (FINs). These powers only apply when information is reasonably required for a compliance check or investigation, not for general monitoring.
A common assumption is that HMRC cannot obtain bank information unless the taxpayer has agreed to it. That assumption isn’t correct. While many third‑party information requests still require either taxpayer consent or approval from an independent tax tribunal, Financial Institution Notices allow HMRC to require banks and other financial institutions to provide information without either. These notices are subject to strict safeguards and internal authorisation, but they do not depend on the taxpayer’s permission.
HMRC can only withdraw funds directly from a bank account under the Direct Recovery of Debts (DRD) regime, and only after following a set process. The debt must be final, exceed £1,000, and leave at least £5,000 across your accounts. You must also be given notice and a 30-day objection window before any funds are taken.
Being contacted doesn’t necessarily mean wrongdoing. Many checks are triggered by data mismatches or algorithmic flags. You may have done nothing wrong, but you will need to respond clearly and promptly, with proper records.
HMRC’s powers have grown, and with tools like FINs and DRD now in routine use, the tax office can obtain financial information more easily than ever before. That’s why keeping your affairs in order matters. Maintaining clear, accurate records , separating personal and business finances, and filing on time all help reduce the risk of scrutiny. And when your tax affairs become more complex, seeking expert advice can make all the difference.
And if you’re forming a company or reviewing your current setup, we can help. At Rapid Formations , we help businesses get up and running with future-proof foundations.
Yes, HMRC can request information about joint accounts if it believes the funds are relevant to your tax affairs. While this doesn’t automatically mean your partner is under investigation, it’s another reason to avoid mixing personal and business finances, and to keep clear records of ownership and use.
Potentially, yes. The UK has data-sharing agreements with over 100 countries under the Common Reporting Standard (CRS), allowing HMRC to receive information about offshore accounts. If you have overseas income or accounts, you may be required to declare them, and failure to do so could trigger penalties or an enquiry.
Not directly. Lenders don’t report mortgage applications to HMRC. However, if you provide bank statements or tax returns that don’t align with what HMRC has on record – for example, declaring low income for tax but high income to a lender – that mismatch could trigger interest if discovered later.